A sophisticated Ukrainian threat group, known as Gamaredon, has escalated its attacks on the country’s government and military targets with a new arsenal of malware and abused cloud services. The group’s latest expansion poses significant risks not just for Ukraine but also for global organizations that rely on cloud computing. Gamaredon, a well-known threat actor … Read more
The Rise of Post-Quantum Cryptography Starts with Credentials In a significant shift towards strengthening digital security, organizations are embracing post-quantum cryptography (PQC) to protect against the looming threat of quantum computers that could potentially break current encryption methods. However, recent research highlights a crucial starting point for implementing PQC: secure credentials management. A key challenge … Read more
OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI, but with Strings Attached In a major development in the world of artificial intelligence (AI) and cybersecurity, OpenAI has announced the limited preview of its new GPT-5.6 model lineup, featuring three tier-based systems named Sol, Terra, and Luna. Among these, GPT-5.6 Sol stands out as … Read more
The US government has announced a $10 million bounty for information leading to the identification of Russian state hackers who have been targeting high-profile individuals, including current and former government officials, military leaders, journalists, and politicians. The threat actors, tracked as UNC5792 and UNC4221, are linked to the Russian intelligence services (RIS) and have been … Read more
In a move that has left the tech community reeling, OpenAI and Anthropic have both been restricted by the Trump administration from releasing their latest AI models to the public due to concerns over national security risks. The unprecedented government vetting of these powerful technologies has sparked debate about the balance between innovation and regulation. … Read more
Critical SSH Flaw Exposes Millions to Remote Code Execution Attacks A devastating security vulnerability has been unearthed in the popular libssh2 library, used by millions of users worldwide for secure shell (SSH) connections. The flaw, identified as CVE-2026-55200, allows attackers to execute arbitrary code on vulnerable systems, exploiting a client-side weakness in the SSH protocol. … Read more
Microsoft’s Edge browser has been rocked by a significant security breach, with the company announcing the removal of 119 extensions that were secretly injecting malware into users’ browsers. The malicious extensions, which ranged from productivity tools to games and utilities, had been downloaded over 1 million times before being pulled from the Microsoft Store. The … Read more
OpenAI’s New GPT-5.6 Sol Model Brings Advanced Cybersecurity Capabilities to Select Partners In a significant development in the realm of artificial intelligence and cybersecurity, OpenAI has unveiled its latest GPT-5.6 model lineup, with the top-tier “Sol” variant touted as its most advanced tool for defensive security tasks. The new models are part of a tier-based … Read more
Cybersecurity researchers have uncovered a sophisticated attack campaign that leverages compromised npm and Go packages to deliver a Python-based infostealer malware, further compromising developers’ systems. The attackers cleverly employed VS Code tasks to deploy the malicious code, demonstrating the evolving tactics of threat actors. The affected software packages, used by millions of developers worldwide, were … Read more
A Critical SSH Flaw Exposed: What You Need to Know About libssh2 CVE-2026-55200 Security researchers have just published a public proof-of-concept (PoC) exploit for a critical vulnerability in the widely-used SSH library, libssh2. The flaw, designated as CVE-2026-55200, affects all versions of libssh2 and can be exploited by an attacker to execute arbitrary code on … Read more