Your blog category
Microsoft on Friday said it will disable its much-criticized artificial intelligence (AI)-powered Recall feature by default and make it an opt-in. Recall, currently in preview and coming exclusively to Copilot+… Read More »Microsoft Revamps Controversial AI-Powered Recall Feature Amid Privacy Concerns
Details have emerged about a new critical security flaw impacting PHP that could be exploited to achieve remote code execution under certain circumstances. The vulnerability, tracked as CVE-2024-4577, has been… Read More »New PHP Vulnerability Exposes Windows Servers to Remote Code Execution
Cybersecurity researchers have disclosed that the LightSpy spyware allegedly targeting Apple iOS users is in fact a previously undocumented macOS variant of the implant. The findings come from both Huntress… Read More »LightSpy Spyware’s macOS Variant Found with Advanced Surveillance Capabilities
2023 was a year of unprecedented cyberattacks. Ransomware crippled businesses, DDoS attacks disrupted critical services, and data breaches exposed millions of sensitive records. The cost of these attacks? Astronomical. The… Read More »Ultimate Cyber Hygiene Guide: Learn How to Simplify Your Security Efforts
Google is urging third-party Android app developers to incorporate generative artificial intelligence (GenAI) features in a responsible manner. The new guidance from the search and advertising giant is an effort… Read More »The AI Debate: Google’s Guidelines, Meta’s GDPR Dispute, Microsoft’s Recall Backlash
Traditional SCAs Are Broken: Did You Know You Are Missing Critical Pieces? Application Security professionals face enormous challenges securing their software supply chains, racing against time to beat the attacker… Read More »Cyber Landscape is Evolving – So Should Your SCA
The U.S. Federal Bureau of Investigation (FBI) has disclosed that it’s in possession of more than 7,000 decryption keys associated with the LockBit ransomware operation to help victims get their… Read More »FBI Distributes 7,000 LockBit Ransomware Decryption Keys to Help Victims
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of cyber attacks targeting defense forces in the country with a malware called SPECTR as part of an espionage campaign… Read More »SPECTR Malware Targets Ukraine Defense Forces in SickSync Campaign
The threat actor known as Commando Cat has been linked to an ongoing cryptojacking attack campaign that leverages poorly secured Docker instances to deploy cryptocurrency miners for financial gain. “The… Read More »Commando Cat Cryptojacking Attacks Target Misconfigured Docker Instances
The distributed denial-of-service (DDoS) botnet known as Muhstik has been observed leveraging a now-patched security flaw impacting Apache RocketMQ to co-opt susceptible servers and expand its scale. “Muhstik is a… Read More »Muhstik Botnet Exploiting Apache RocketMQ Flaw to Expand DDoS Attacks