Apple Tightens the Reins on Full Disk Access in macOS to Mitigate AI-Related Risks In a move aimed at safeguarding user data, Apple has announced plans to introduce additional controls for Full Disk Access (FDA) in its macOS operating system. This decision comes as a response to the growing risks associated with continuously evolving artificial … Read more
A major blow to international cybercrime was dealt on October 2 when Anibal Alexander Canelon Aguirre, a Venezuelan national and alleged leader of Tren de Aragua (TdA), a notorious transnational criminal organization, was arrested by the FBI. Canelon Aguirre, also known as ‘Prometheus’ or ‘The Engineer’, has been on the run since March 2026, when … Read more
A massive cyberattack on Arizona’s court system has compromised the personal information of over 1.3 million people, exposing a vulnerability in the state’s justice system. The breach began when an unsuspecting court employee clicked on a malicious link sent via email, allowing hackers to gain access to sensitive data stored on a backup server. The … Read more
A Novel Proof-of-Concept Exploits Microsoft Defender’s Update Mechanism A sophisticated proof-of-concept (PoC) cyberattack technique has been discovered to silently prevent Windows Defender from receiving updates without exploiting a vulnerability. Dubbed “BigDiskBuster” by researchers, this novel attack allows malicious actors to extend the lifetime of existing malware on compromised machines by blocking Defender updates. Developed by … Read more
BigDiskBuster, a novel proof-of-concept (PoC) cyberattack technique, has been found to prevent Windows Defender from receiving updates without exploiting a vulnerability. Dubbed “BigDiskBuster” by researchers from LevelBlue, this PoC was originally published on September 19 by security researcher Abdelhamid Naceri, who goes by MSNightmare. The technique is capable of leaving Microsoft Defender running while blocking … Read more
As AI adoption surges across industries, a seismic shift is underway in cybersecurity teams. According to new research from IANS, chief information security officers (CISOs) are rethinking their budgets and staffing strategies as artificial intelligence becomes an increasingly crucial factor in defending against threats. Rather than shrinking their teams or relying on automation to replace … Read more
Google’s Internal AI Agent Uncovers 500 Vulnerabilities in Web Apps, Raising Questions About AI-Powered Security A recent revelation from Google has shed light on the company’s internal efforts to bolster its web application security using artificial intelligence (AI). PageBreak, an AI agent developed by Google’s Product Security team, has discovered over 500 cross-site scripting (XSS) … Read more
Critical Healthcare Systems Remain Vulnerable to Quantum-Ready Attacks A recent study has revealed that the healthcare sector is woefully unprepared for the advent of post-quantum cryptography (PQC), leaving sensitive patient data potentially exposed to “harvest now, decrypt later” attacks. Researchers from Forescout Technologies analyzed over 2.5 million devices across more than 50 healthcare delivery organizations … Read more
A critical vulnerability in the Ninja Forms plugin for WordPress has been exploited by hackers, compromising thousands of websites. The attack also affects users of WPC Product Bundles for WooCommerce, another popular plugin with over 30,000 installations. The exploit takes advantage of a stored cross-site scripting (XSS) flaw, which requires an authenticated session to launch. … Read more
As AI adoption accelerates across industries, cybersecurity teams are being forced to rethink their approach to security. New research from IANS suggests that instead of replacing people with machines, CISOs are looking to AI as a way to augment and support their existing teams. The study found that most CISOs aren’t planning to downsize their … Read more