85 article(s) in our index mention this organisation.
A vulnerability in Linux's vhost subsystem allows a local user to gain root access and potentially compromise a host system. Tencent Zhuque Lab released a fix on August 3, and several vendors, including Red Hat, Amazon,…
A Zenity Labs researcher discovered a vulnerability in Amazon Bedrock AgentCore that allowed an attacker to extract AWS credentials by simply requesting information from an agent. This led to the ability to enumerate oth…
Anthropic is introducing a tiered access program for its advanced AI cyber LLMs, including Claude Mythos, Sonnet, and Opus, to manage the dual-use potential of these models and accelerate vulnerability discovery. While t…
A new report reveals that major automakers routinely share personally identifiable data collected from connected cars with numerous third parties, including advertisers, tech giants like Google and Meta, and data brokers…
Dutch authorities have arrested a 24-year-old man, Pepijn van der Stap, a reformed hacker previously known as ‘Umbreon,’ in connection with the ShinyHunters hacking group. Van der Stap, who previously worked as a softwar…
A New Zealand-based convenience store experienced a chaotic website incident due to a misconfigured website builder (Base44, owned by Wix). The incident highlights the risks associated with using simplified website build…
A vulnerability in the Linux kernel's KVM virtualization code for ARM64 processors allows a guest virtual machine to read and write host kernel memory, potentially leading to an attacker gaining control of the underlying…
The CISA has decided to discontinue its weekly vulnerability bulletin. This follows a DOJ investigation into Nvidia's acquisition of Groq, with multiple alternative AI networking solutions emerging. Additionally, concern…
Spain is experiencing a new wave of AI-assisted cyberattacks, with Russian actors leveraging AI to conduct phishing campaigns. Simultaneously, concerns are rising about the potential for AI to be used in future attacks,…
This article discusses a range of cybersecurity and technology developments, including Nvidia's acquisition of Groq, ongoing concerns about data privacy (specifically Apple's smartwatches), and the broader trend of open-…
This article highlights a growing trend of low-quality casino websites being used to conceal sophisticated threat actors and their operations. The sites are exploited to launch phishing attacks, leveraging vulnerabilitie…
Iranian state-sponsored actors are using a data-stealing malware called Chosen Brick to target Windows machines. The malware is designed to silently extract sensitive information from compromised systems, highlighting a…
A Cisco email security box can be exploited to gain remote code execution, potentially allowing an attacker to take control of the device. This vulnerability stems from a flaw in how the device handles email processing,…
Microsoft released a record number of security patches – approximately 972 – addressing a significant number of high-severity vulnerabilities. This surge in patching is driven by advancements in AI-powered vulnerability…
Amazon has appointed Kevin Mandia, founder of Mandiant and a leading cybersecurity expert, to its board of directors. This move is intended to bolster Amazon's cybersecurity defenses and provide valuable insights as the…
This week’s security news is dominated by a massive wave of Android vulnerabilities (200 total), a complex phishing campaign targeting Singpass accounts, and a growing number of exposed Plex servers. Beyond that, a Chin…
A massive dump of stolen infostealer logs, containing 5,871 infected machines across 162 countries, has exposed a wealth of AI-related credentials and API keys. The data includes session tokens, JWTs, and JWEs for servic…
PostgreSQL has released a security update (version 18.6 and earlier) to address a 12-year-old vulnerability (CVE-2026-6471) that allowed a replication user with the REPLICATION attribute to execute arbitrary code on the…
OpenAI has released GPT-6 Astra, a new AI model that achieved a perfect score on ExploitBench, demonstrating advanced capabilities in exploiting software vulnerabilities. To mitigate potential misuse, OpenAI has implemen…
This guest diary details the creation and use of ‘batch.py’, a Python script designed to analyze logs and data related to honeypot-Omaha, a decoy system set up by the Internet Storm Center. The script automates the proce…
