Microsoft has issued an emergency patch for a critical zero-day vulnerability in Windows Defender, dubbed RoguePlanet, which was made public by a disgruntled security researcher known as “Nightmare-Eclipse” just last month. The flaw, tracked as CVE-2026-50656, allows an attacker to escalate privileges on a Windows device from a basic user to the highest SYSTEM-level access, … Read more
Iran’s Cyber Crosshairs Focus Beyond Critical Infrastructure, Warning to All Organizations A recent spate of cyberattacks linked to Iran has sparked a false sense of security among companies that don’t operate in critical infrastructure sectors. These organizations assume they’re not at risk because they’re not high-profile targets like power grids or water utilities. However, the … Read more
As AI-powers its vulnerability discovery capabilities, Microsoft is bracing users for an influx of Windows security updates. In a recent blog post, the tech giant revealed that advances in artificial intelligence have significantly accelerated the pace of vulnerability discovery, allowing engineers to identify more security issues before they can be exploited in zero-day attacks. This … Read more
A new and highly effective data-extortion group has emerged, targeting organizations through a combination of identity-focused tactics and social engineering. The group, known as Helix, has already been linked to several high-profile attacks against companies such as Medtronic, Nissan, and Kodak. Helix’s modus operandi involves initial contact with employees via voice phishing (vishing) calls, where … Read more
OpenMandriva Linux Project Bites Back After Attempted Sabotage A disturbing incident has unfolded within the OpenMandriva Linux community, with a contributor accused of attempting to sabotage the project. The alleged attempt involved deleting crucial repositories and pushing an empty package that could have caused harm to users’ systems. What’s more concerning is that this act … Read more
Iran’s cyber operations have long been a source of concern, with many assuming that only critical infrastructure is at risk. However, recent attacks demonstrate that this assumption is misguided. The groups behind these incidents, including Handala and Ababil of Minab, are not simply targeting high-profile targets; they are instead on the hunt for easily exploited … Read more
A malicious package on the Node Package Manager (npm) has compromised thousands of developer systems, targeting cryptocurrency wallets and stealing private keys and mnemonic seed phrases. The Injective Labs SDK project’s GitHub repository was hacked, allowing attackers to publish a malicious version of the @injectivelabs/sdk-ts npm package. This supply-chain attack highlights the importance of securing … Read more
OpenMandriva Linux Project Hit by Attempted Internal Sabotage A long-running dispute among contributors to the OpenMandriva Linux project has escalated into an attempted act of internal sabotage. The perpetrator, Davide Beatrici, a leading developer of the instant messaging app Mumble and a friend of the attacker, deliberately deleted crucial repositories and pushed an empty package … Read more
A devastating new backdoor has been discovered lurking in Windows systems, capable of unleashing a triple threat of malware on unsuspecting users. Dubbed GigaWiper, this cunning piece of code combines the destructive power of disk wiping, the deceitful tactics of fake ransomware, and the stealthy capabilities of spyware to wreak havoc on compromised machines. GigaWiper’s … Read more
As attackers continue to refine their tactics, a new trend is emerging that highlights the importance of cybersecurity vigilance. Dormant GitHub accounts are being exploited to blend in with legitimate users and gain insight into corporate organizational structures – all without raising suspicion. This stealthy approach has left many organizations scrambling to re-evaluate their security … Read more