A now-patched critical security flaw in the Wazur Server is being exploited by threat actors to drop two different Mirai botnet variants and use them to conduct distributed denial-of-service (DDoS)… Read More »Two Distinct Botnets Exploit Wazuh Server Vulnerability to Launch Mirai-Based Attacks
You don’t need a rogue employee to suffer a breach. All it takes is a free trial that someone forgot to cancel. An AI-powered note-taker quietly syncing with your Google… Read More »Think Your IdP or CASB Covers Shadow IT? These 5 Risks Prove Otherwise
Behind every security alert is a bigger story. Sometimes it’s a system being tested. Sometimes it’s trust being lost in quiet ways—through delays, odd behavior, or subtle gaps in control.… Read More »⚡ Weekly Recap: Chrome 0-Day, Data Wipers, Misused Tools and Zero-Click iPhone Attacks
OpenAI has revealed that it banned a set of ChatGPT accounts that were likely operated by Russian-speaking threat actors and two Chinese nation-state hacking groups to assist with malware development,… Read More »OpenAI Bans ChatGPT Accounts Used by Russian, Iranian and Chinese Hacker Groups
Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware. The malware, introduced via a change to “lib/commonjs/index.js,” allows an attacker… Read More »New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
Cybersecurity researchers have shed light on a new campaign targeting Brazilian users since the start of 2025 to infect users with a malicious extension for Chromium-based web browsers and siphon… Read More »Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025
Cybersecurity researchers are alerting to a new malware campaign that employs the ClickFix social engineering tactic to trick users into downloading an information stealer malware known as Atomic macOS Stealer… Read More »New Atomic macOS Stealer Campaign Exploits ClickFix to Target Apple Users
India’s Central Bureau of Investigation (CBI) has revealed that it has arrested four individuals and dismantled two illegal call centers that were found to be engaging in a sophisticated transnational… Read More »Microsoft Helps CBI Dismantle Indian Call Centers Behind Japanese Tech Support Scam
When generative AI tools became widely available in late 2022, it wasn’t just technologists who paid attention. Employees across all industries immediately recognized the potential of generative AI to boost… Read More »Empower Users and Protect Against GenAI Data Loss
Cybersecurity involves both playing the good guy and the bad guy. Diving deep into advanced technologies and yet also going rogue in the Dark Web. Defining technical policies and also… Read More »Inside the Mind of the Adversary: Why More Security Leaders Are Selecting AEV