A New Breed of AI-Powered Cyberthreat Is Here
Cybersecurity followed predictable patterns for years. A researcher finds a bug, a CVE gets filed, vendors issue patches. The whole…
Security
Cybersecurity, vulnerabilities, threats, and defense
Cordyceps CI/CD Flaws Put 300+ GitHub Repos at Risk of Supply-Chain Attacks
Security researchers have identified a new class of CI/CD vulnerability that lets attackers hijack workflows and compromise open-source supply chains….
Why service desks keep losing to social engineering
Service desk social engineering remains one of the most reliable ways attackers break into corporate networks. The 2025 attacks against…
Amadey and StealC malware infrastructure dismantled in Operation Endgame
A coordinated international law enforcement action has disrupted the infrastructure behind the Amadey and StealC malware families, knocking out hundreds…
CISA warns of maximum-severity Ubiquiti flaws under active attack
CISA is warning that hackers are actively exploiting critical vulnerabilities in Ubiquiti UniFi OS devices and Lantronix serial-to-ethernet servers, giving…
Shadow AI’s real threat isn’t data leakage — it’s access control
The first wave of enterprise AI worry was simple: employees pasting sensitive data into public tools. Security teams responded with…
From assistive to agentic: why AI’s next shift matters for security teams
The average enterprise security team runs 40 or more tools. They generate mountains of telemetry and overlapping alerts. Yet breach…
Stealthy Mistic backdoor tied to ransomware access broker KongTuke
A new backdoor called Mistic has been spotted in financially motivated attacks hitting organizations across insurance, education, IT, and professional…
CISA warns Fortinet customers as FortiBleed hits 86,644 FortiGate devices
CISA is urging Fortinet customers with FortiGate appliances to secure their devices against an ongoing campaign dubbed FortiBleed, believed to…
Cisco Unified CM flaw exploited after PoC reveals file-write path to root
Threat actors have started exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified CM Session Management…