Critical Vulnerability in Rejetto HFS Exploited by Threat Actors, Warns VulnCheck A critical vulnerability in Rejetto HTTP File Server (HFS) is being actively exploited by threat actors to gain remote code execution and bypass authentication. The flaw, tracked as CVE-2026-61500 with a CVSS score of 9.3, was discovered by Horizon3.ai researchers using an AI-powered model, … Read more
Over 250,000 people’s sensitive medical information has been stolen in a pair of data breaches that hit two separate healthcare companies in New Jersey and Texas. The incidents highlight the ongoing threat of cyber attacks against healthcare organizations, which hold vast amounts of personal and protected health information. Clover Health Investments, based in Jersey City, … Read more
Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws A sophisticated Linux backdoor has been discovered, infecting systems with malware that uses the Session Traversal Utilities for NAT (STUN) protocol to turn them into proxy servers. The malware, dubbed ClingSTUN, not only exploits two dozen vulnerabilities for initial access but also sets up persistence mechanisms … Read more
Google has temporarily shut down its Open Source Software Vulnerability Reward Program (OSS VRP) to product vulnerability submissions, citing an influx of invalid automated reports that are overwhelming the system. The move comes as part of a broader trend in the cybersecurity industry where AI-powered tools are increasingly being used to discover vulnerabilities, but also … Read more
Cybersecurity teams are struggling to keep pace with AI-powered attacks that are outpacing traditional threats. These attacks are fast, relentless, and automated, forcing organizations to rethink their security strategies. The latest Black Hat USA 2026 conference highlighted the growing concern over AI-driven attacks, which are changing the game for cybersecurity teams. According to a Dark … Read more
Chinese Hackers Use Deceptive Tactics to Steal AI Experts’ Credentials A sophisticated cyber espionage campaign has been uncovered, targeting artificial intelligence (AI) experts working for US think tanks, universities, and law firms. Chinese hackers impersonated US officials in a series of phishing attacks designed to steal sensitive credentials, highlighting the increasing sophistication of state-sponsored hacking … Read more
IoT Devices Compromised by New Linux Malware Strain, Used as Proxy Nodes for Malicious Activity A newly discovered Linux malware strain, dubbed “ClingSTUN” by Fortinet’s FortiGuard Labs researchers, has been found to exploit 24 known vulnerabilities in Internet of Things (IoT) devices, compromising their security and turning them into proxy nodes for malicious activity. This … Read more
A Major Player in ATM Jackpotting Scams Brought to Justice In a significant development that highlights the ongoing efforts of law enforcement agencies to combat cybercrime, the alleged developer of Ploutus malware has been arrested and appeared in a US court. Anibal Alexander Canelon Aguirre, also known as “Prometheus” and “The Engineer,” is accused of … Read more
As OpenAI continues to push the boundaries of artificial intelligence, it’s introducing a new feature that aims to combat AI-generated text scams in the European Union. Starting this month, ChatGPT and Codex will invisibly watermark text generated by these models, making it easier to detect when users copy or share AI-created content without permission. The … Read more
Cybersecurity teams are facing an unprecedented challenge as AI-driven attacks become increasingly sophisticated and automated. The latest developments in artificial intelligence (AI) are revolutionizing the way threat actors operate, leaving security professionals scrambling to keep up. The rise of large language models (LLMs), particularly those at the forefront of development, has given attackers a significant … Read more