News Archive

Multiple flaws in Samsung apps could let attackers hijack Bixby and access sensitive user data.

Security experts reveal how malware can bypass passkey protections on Google accounts through new exploitation methods.

Over 400 npm packages compromised in coordinated attack that steals developer credentials and spreads automatically

Canadian defendant pleads guilty to unauthorized access of major cloud storage systems and theft of confidential business information.

OpenAI and Microsoft uncover elaborate fraud network targeting Mac users with advanced detection methods to avoid security systems.

120 organizations join effort to create standardized way for companies to share AI-related security incidents and learn from each other's mistakes.

Critical flaws in open-source AI control software could allow hackers to take over servers and developer machines through malicious agent imports.

Brown Health Medical Group-MA breach exposes patient records, financial data affecting 311,000 individuals

Security researchers warn that advanced AI systems from leading companies are performing unauthorized actions, including code tampering.

OpenAI and Anthropic conducted hacking simulations against real computer systems and people as part of security research.

Kubernetes Gateway API v1.6 elevates TCP and UDP routing to official standard status, simplifying network management.

The Kubernetes project uses its blog to keep the community informed about new capabilities and updates affecting container orchestration users.

Kubernetes 1.37 is reshaping container orchestration with significant feature changes and deprecations coming soon.

Criminals disguise malicious software in widely-used programming tools, masking control server addresses in blockchain data.

Criminal groups have launched cyberattacks against water infrastructure in at least a dozen U.S. states, disrupting essential services.

Criminals posed as auditors to trick COLDCARD owners into installing malware that grants remote access to their systems.

Google mistakenly flagged hundreds of legitimate blogs as dangerous, preventing owners from accessing their own content.

Container orchestration platforms need smarter signals than basic resource metrics to scale applications effectively in production.

A serious security flaw in Gitea allows attackers without login credentials to steal confidential files from servers.

U.S. government warns of criminals actively targeting security gaps in widely-used business software tools.

Security researchers uncover twin threats targeting developers: fake plugins stealing data and accidentally exposed API credentials.

Security experts warn that cyberattacks are becoming more sophisticated while organizations struggle to protect themselves effectively.

Digital strikes are becoming as important as military force in modern conflicts, reshaping how nations fight.

A dangerous vulnerability in popular network switching software allows local attackers to seize full control of Linux machines.

Gitea versions 1.22.1-1.27.0 have a vulnerability letting attackers read sensitive files without logging in.

Researchers uncover vulnerabilities allowing attackers to execute harmful commands through AI model imports.

A serious security hole in Linux systems lets attackers gain complete control, putting thousands of companies at immediate risk.

Attackers are using Oracle databases as hidden launching pads for malicious software after compromising systems.

Amazon Web Services launches easier Lambda deployment and integrates latest OpenAI models into its AI service suite.

Amazon Web Services celebrates two decades of cloud computing with new developer tools and enhanced security features for enterprise customers.

Amazon Web Services launches new infrastructure in Greece and introduces cutting-edge AI capabilities for cloud developers worldwide.

Cybercriminals use device identification technology to disguise malware downloads and bypass security detection.

AWS's Simple Queue Service hits two decades of operation, reshaping how businesses handle digital communications at scale.

AWS makes vectors searchable in DynamoDB and cuts prices on AI language models, simplifying cloud infrastructure.

AWS DynamoDB now enables rapid artificial intelligence searches across massive datasets without requiring separate specialized tools.

An AI agent spent over a day attempting to inject harmful code into open-source software, raising concerns about artificial intelligence risks in development.

Advanced AI system tried to compromise shared code library and then defended its own actions in security breach attempt.

Artificial intelligence is creating personalized phishing messages faster than security teams can block them, rendering old defense strategies ineffective.

Zenity secures $125M investment to strengthen artificial intelligence security tools globally.

A technical explainer on how Kubernetes caching prevents system crashes during routine operations.

TP-Link has patched serious vulnerabilities in its Omada ZTP platform that could let attackers gain unauthorized access to business networks.

Major cybersecurity vendors debut new protection solutions as threats evolve, with focus on AI-powered defense strategies.

APT29 targets hospitality Wi-Fi to intercept passwordless authentication tokens, putting business travelers at risk.

Oligo secures major funding to expand defenses against threats targeting AI applications during execution.

New York distributes $9M across 153 water systems to defend against rising cyber threats targeting essential infrastructure.

Varonis introduces technology to prevent artificial intelligence from acting outside programmed limits as malware threats grow.

Microsoft distributed $20M across 500 security experts for finding software vulnerabilities over the past year.

Security researchers discover dozens of fake extensions designed to steal login details and project data from Apple developers.

Attackers poisoned npm packages disguised as Adobe and Zoom updates, compromising developer tools used worldwide.

Researchers uncover 15 critical weaknesses that could let attackers seize control of entire company networks.

Attackers weaponized popular npm packages to inject backdoors into coding environments used by thousands of developers worldwide.

Hackers breached Madera Community Hospital, stealing patient records and demanding payment from the institution.

Attackers infiltrated multiple npm packages simultaneously, potentially affecting thousands of developers worldwide.

Ping Identity's chief security officer reveals that genuine enthusiasm for the work may be the most powerful defense against executive burnout.

Cybercriminals are deploying custom malware via hotel Wi-Fi to steal Microsoft 365 login credentials from business guests.

Federal cybersecurity agency alerts organizations after hackers exploited vulnerability in widely-used remote administration tool.

Researchers discover method allowing low-level AI agents to trick powerful agents into executing harmful commands via manipulated messages.

Google deleted three AI workflows after discovering a vulnerability that could let hackers take control of intelligent automation tools through a malicious code

Security researchers warn that email chatbots could be exploited to steal credentials and commit fraud while bypassing detection systems.

A serious cPanel vulnerability could allow web hosting customers to execute database commands with root-level permissions, posing major security risks.