Data Exposure Flaws Threaten Dify AI Platform Used by 1 Million Apps
Four vulnerabilities in the open source AI platform Dify could be exploited to siphon other tenants’ data in multi-tenant cloud configurations, Zafran Security warns. A…
Category: SecurityWeek
Dragos Unveils AI for OT Security
Dragos on Tuesday unveiled EmberAI, a new AI designed specifically for operational technology (OT) cybersecurity. The new product module is built on the company’s Intelligence…
Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks
Researchers found an eight-year old high severity vulnerability affecting nearly all Samsung devices from the Galaxy S9 to S25 living within the KNOX kernel. The…
Trump Signs Executive Order Accelerating Post-Quantum Cryptography Migration
President Donald Trump on Monday signed an executive order to strengthen data protection in preparation for the arrival of practical quantum computing. Executive Order 14409…
What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks
The latest wave of breaches attributed to the ShinyHunters cybercrime collective (e.g., University of Nottingham, DentaQuest, 7-Eleven, Medtronic, and Wynn Resorts), reinforces a hard truth…
North Korean Hackers Blamed for Mastra NPM Supply Chain Attack
The North Korean state-sponsored threat actor Sapphire Sleet is behind the Mastra supply chain attack that hit over 140 NPM packages last week, Microsoft reports.…
Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data
Threat actors are exploiting a medium-severity vulnerability in the Gravity SMTP WordPress plugin to steal complete system details, Defiant warns. Gravity SMTP for WordPress is…
Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data
Security researchers at Calif.io have disclosed a memory leak vulnerability in Squid Proxy that has existed in the software since 1997. Squid is a widely…
More Cybersecurity Firms Disclose Impact From Klue Hack
At least nine organizations have publicly acknowledged the impact of the supply chain attack on market intelligence platform Klue. The incident occurred on June 11-12…
French President Urges US to Share Cutting-Edge AI and Democracies to Cooperate on Regulation
French President Emmanuel Macron on Wednesday urged the world’s wealthy democracies to work together on regulating advanced artificial intelligence systems, speaking at a high-level meeting…
15,000 WordPress Websites Cleaned Up in SocGholish Botnet Takedown
Law enforcement agencies in four countries, working with Europol and private partners, have disrupted SocGholish infrastructure and cleaned up nearly 15,000 infected WordPress websites. Active…
Cisco to Acquire WideField Security to Boost Splunk’s Agentic SOC
Cisco on Thursday announced an agreement to acquire identity lifecycle security company WideField Security to strengthen the capabilities of Splunk’s Agentic SOC. No financial details…