Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Researchers Uncover Systematic Vulnerability in AI Language Models Through Best-of-N Attack
Security researchers from Anthropic, in collaboration with experts from Oxford, Stanford, and MATS, have discovered a significant security vulnerability affecting ...
Security Alert: Malicious Python Packages Discovered Targeting Developer Systems
Fortinet’s cybersecurity research team has uncovered a significant security threat within the Python Package Index (PyPI), identifying two malicious packages ...
Adobe ColdFusion Security Alert: Critical Path Traversal Vulnerability Demands Urgent Attention
Adobe has disclosed a critical security vulnerability (CVE-2024-53961) affecting its ColdFusion web application platform, with confirmation of an active proof-of-concept ...
Critical Cleo Software Vulnerability Exploited in Major Ransomware Campaign
The Clop ransomware group exploited CVE-2024-50623, a critical zero-day in Cleo’s managed file transfer products, to breach dozens of organizations ...
Critical Supply Chain Attack Targets Popular npm Packages with Crypto Mining Malware
A significant supply chain security breach has been uncovered by cybersecurity researchers at Sonatype and Socket, affecting three widely-used npm ...
Critical Security Breach: ESA’s Official Space Shop Compromised by Payment Card Skimmer
Cybersecurity researchers at Sansec have uncovered a sophisticated cyberattack targeting the European Space Agency’s (ESA) official merchandise store. The incident ...
Russian-Israeli Developer of LockBit Ransomware Faces US Charges in Landmark Cybercrime Case
In a significant development in the fight against global cybercrime, US law enforcement agencies have announced charges against Rostislav Panev, ...
APT29 Threat Group Deploys Large-Scale RDP Proxy Infrastructure for Advanced Cyber Espionage
Trend Micro researchers have uncovered a sophisticated cyber espionage campaign orchestrated by APT29 (also known as Midnight Blizzard and Earth ...
Sophos Firewall Hit by Three Critical Vulnerabilities: What Security Teams Need to Know
Sophos has released an urgent security update addressing three critical vulnerabilities in Sophos Firewall, each carrying a severe CVSS score ...
Critical Alert: BadBox Malware Evolution Threatens Major Device Manufacturers
Security researchers at BitSight have revealed alarming findings about the BadBox malware network, which has now infected more than 192,000 ...