News Archive

Attackers exploit Gitea vulnerability to impersonate users and administrators without authentication.

AWS introduces advanced AI features and workspace automation, reshaping how businesses deploy intelligent applications on cloud infrastructure.

Hackers exploit routine operational oversights to breach systems in minutes. Here's what you need to know.

Cybercriminals are using phone calls and deception to steal corporate documents from Microsoft SharePoint systems.

AI safety tools meant to prevent malicious software can be tricked into executing harmful code through clever manipulation techniques.

AI assistants checking code repositories can be tricked into executing malicious commands, putting developer machines at risk.

A widely-used cryptocurrency development package was infiltrated with malicious code designed to steal digital wallet credentials from developers.

Security researchers reveal how AI coding tools can be weaponized to attack the machines they're installed on using old-school techniques.

Palo Alto Networks released patches for 13 security weaknesses affecting its widely-used firewall software.

An OpenMandriva contributor allegedly attempted to damage the Linux distribution, raising concerns about open-source project security.

GitHub's npm package manager disables automatic script execution and kills weak authentication tokens to fight supply chain attacks.

Node.js package manager npm 12 stops running hidden scripts during software installation to protect developers from compromised packages.

Headlamp plugin now lets engineers oversee batch processing tasks in Volcano more efficiently through a visual dashboard.

A fresh plugin expands Headlamp's capabilities to simplify how teams manage multiple Kubernetes clusters from their web browser.

GodDamn ransomware uses compromised drivers to turn off defenses before attacking systems.

A massive cyberattack compromised personal information of millions of motorists, prompting international law enforcement action against fraud networks.

Law enforcement agencies worldwide arrested thousands of suspects operating online fraud schemes in a coordinated global crackdown.

Microsoft has patched a serious security hole in Windows Defender that could let attackers gain unauthorized system access.

Microsoft discontinuing OWA Light client, pushing users toward modern email interfaces and cloud solutions.

Microsoft patched a serious flaw in Windows Defender that could let attackers take complete control of your computer.

Meta's new AI tool uses public Instagram photos to generate images, raising questions about photo ownership and user consent.

Hackers breached a major Japanese telecom company through a hidden software flaw, putting 12 million people at risk.

AssuranceAmerica's security failure exposed personal information of nearly 7 million customers after attackers exploited a Windows Defender vulnerability.

Kubernetes project uses its blog to announce features and community developments affecting container orchestration.

QIZ Security lands major funding to develop cryptographic protection systems ahead of quantum computing threats.

Hackers exploit years-old unused GitHub accounts to spy on companies undetected while researching their organization structure.

Machine learning tools are flooding open source projects with code contributions, creating new challenges for project leaders to manage quality and security.

Chrome 150 rolls out fixes for 27 security holes, with serious vulnerabilities patched.

Modern cybersecurity challenges are outpacing traditional defense methods, requiring urgent strategic shifts.

New phishing-as-a-service operation exploits reduced IT staffing during summer months to steal corporate cloud accounts

Mount Royal University confirms security breach while Microsoft addresses critical Defender vulnerability affecting millions of users worldwide.

Mount Royal University confirms attackers stole sensitive data from students and staff in ransomware incident.

UK government announces new AI-powered security strategy and gets major tech firms to commit to safer practices.

Amazon rolls out improved security tools and next-gen processors designed to speed up cloud workloads while cutting costs.

AWS delivers faster deployment tools and rollback capabilities to reduce cloud infrastructure risks and complexity.

Amazon releases new Graviton5-powered servers and CloudFormation Express mode to help teams build cloud infrastructure in seconds.

Security researchers uncover coordinated attacks combining data theft with file destruction capabilities targeting software developers.

AWS introduces rollback capability for EKS cluster upgrades, giving DevOps teams a safety net when updates go wrong.

Machine learning identifies new Windows vulnerabilities faster, prompting Microsoft to increase update frequency and improve cloud protection strategies.

Cybercriminals deploy machine learning to craft convincing Microsoft 365 phishing schemes, forcing Microsoft to accelerate security defenses.

Artificial intelligence has dramatically accelerated hacking campaigns, forcing organizations to rethink their defense strategies.

Security researchers discover six popular coding assistants can be manipulated to secretly convert computers into proxy servers through permission bypass attack

Ubiquiti releases urgent updates fixing dangerous security holes across its entire product line that could let hackers take over systems.

Ubiquiti patched critical security holes across five popular networking platforms used by businesses worldwide.

New malware disguises itself in emails and only activates when clicked, bypassing traditional security tools designed to catch threats.

Hackers planted dangerous software in major developer repositories, targeting millions who use financial apps.

Cybercriminals uploaded fake versions of popular payment software to public code libraries, compromising developer credentials and systems.

KDDI, one of Japan's largest phone companies, revealed a security incident exposing personal information of over 12 million users.

Attackers impersonating Microsoft are tricking workers into giving up security credentials through fake enrollment requests.

Criminals are exploiting a GitHub verification system weakness to disguise fraudulent software updates, putting financial institutions at risk.

U.S. government orders urgent patching of major authentication flaw affecting software development tools.

U.S. government orders immediate patching of critical ColdFusion vulnerability affecting federal networks nationwide.

The etcd project launches v3.7.0, bringing improvements to the distributed database system that powers modern cloud infrastructure.

Security experts warn that traditional email filters cannot stop advanced phishing threats without additional protective layers.

Privacy-focused DuckDuckGo browser now automatically removes video ads from YouTube, shifting the ad-blocking landscape.

A 15-year-old vulnerability in Linux systems is being actively exploited by sophisticated attackers to compromise servers worldwide.

Ubiquiti disclosed a severe vulnerability in UniFi OS that could allow attackers to take complete control of network infrastructure.

CISA warns of four dangerous software flaws under active attack, including a 15-year-old Linux kernel vulnerability affecting millions of systems.

A serious security weakness in Google Dialogflow CX allowed unauthorized access to AI-powered customer service systems across entire cloud accounts.

Cybersecurity researchers discover Chinese-backed hackers have created new malware variants designed to infiltrate and control consumer networking equipment.