Chinese-speaking cybercriminal uses DeepSeek within Hermes framework via Telegram, leverages FOFA and GitHub exploits, breaches three organizations, accidentally leaks sensitive files
Read More
Threat investigators connect four previous npm library breaches affecting axios, debug, chalk, and typo-crypto packages, to a single source.
Read More
Hybrid working arrangements and increasingly sophisticated cyber risks are making fragmented identity systems a key threat vector and operational disruptor
Read More
Investigative reporting reveals a bigger blast radius that the AI firm behind the attack has been upfront about.
Read More
The issue is, should the AI firm involved have notified law enforcement about the users who requested the instructions?
Read More
One cybersecurity firm’s customer base data show the trends for the last quarter, including newer tactics that make spotting brand-phishing difficult.
Read More
Rogue agents escape sandbox, exploit zero-day flaws, laterally move networks, compromise a target infrastructure, with no firm answers from their owner.
Read More
Critics highlight methodological gaps, arguing projections overlook routine upgrades while warning of potential lobbying influence shaping the policy narrative.
Read More
End-to-end autonomously-conducted cyberattack uses malicious inputs, privilege escalation, credential theft, lateral movement, and adaptive ephemeral infrastructure.
Read More
Worm-driven breach exposes scraping of copyrighted audio; insecure systems; and ethically discordant conduct amid 55m leaked credentials and other sensitive data.
Read More
