Tech • IA • Crypto
50 articles analyzed by AI / 276 total
The Cybersecurity and Infrastructure Security Agency (CISA) warned organizations to harden device security after thousands of Fortinet credentials were compromised, raising serious risks. The alert follows the exposure of sensitive access data that could lead to further attacks.
Global cybersecurity agencies issued warnings about the FortiBleed campaign exploiting vulnerabilities in Fortinet firewalls and VPN gateways since early 2023. This campaign risks exposing thousands of credentials worldwide, raising concerns about widespread network compromise.
Canada's spy agency obtained a groundbreaking warrant to legally access and neutralize two foreign-controlled botnets spreading malware within Canadian networks. This operation, revealed in a June 15 court ruling, marks a first in authorized cyber countermeasures on national soil.
Law enforcement dismantled AudiA6, a ransomware crypto laundering service that handled approximately $380 million in illicit funds. This takedown is a major blow against ransomware-related financial crime and crypto laundering infrastructures.
The Texas Cyber Command announced a data breach compromising personal data of more than 3 million hunting and fishing license customers. This breach highlights significant vulnerabilities in public-sector cybersecurity affecting citizen data privacy.
Multiple WordPress plugins by ShapedPlugin were compromised through a supply chain attack, injecting backdoors into legitimate plugin releases. This tampering exposed users to potential unauthorized access and wider web security risks.
A cyberattack on Klue resulted in data breaches impacting several cybersecurity companies by compromising OAuth tokens. This incident underscores vulnerabilities within the cybersecurity sector itself and raises concerns over sensitive intelligence exposure.
Researchers disclosed four security flaws in Dify, an open-source AI workflow platform, that could expose AI chat conversations across tenants. These vulnerabilities present a serious privacy and data security risk in collaborative AI environments.
Malwarebytes revealed that thousands of D-Link routers were taken over by the AryStinger botnet, indicating a large-scale malware infection exploiting Internet of Things devices. The infection threatens network security and user privacy on a broad scale.
Cybersecurity researchers found a new campaign using OXLOADER malware to deliver the CastleStealer trojan via malicious Google Ads. This innovative infection vector exploits popular advertising platforms to spread credential-stealing malware.