Researchers found two previously undisclosed malware samples used to steal AI assistant tokens and other valuable secrets.
Related Articles
All CyberSecurityDive →
CISA’s relationship with industry needs work to reestablish trust, experts say
LAS VEGAS — Collaboration between agencies like the Cybersecurity and Infrastructure Security Agency (CISA) and private industry remains essential to build resilience and combat sophisticated cyber…
Nearly 3K Ivanti Connect Secure instances vulnerable to critical flaw
Dive Brief: Approximately 2,850 IP addresses are vulnerable to CVE-2025-22467, a critical stack buffer-overflow vulnerability that affects Ivanti Connect Secure VPNs, according to a post…
CISA looks to recruit general infrastructure security experts rather than sector-focused advisers
“I need people that can pivot from day to day,” the agency’s acting chief told reporters. Source link
Critical infrastructure at state, local levels at heightened risk of cyberattacks
Dive Brief: State and local communities are facing a rise in cyber threats from nation-state-linked and criminal threat groups, which in many cases are looking…
Your AI-driven threat hunting is only as good as your data platform and pipeline
The data-centric foundation for modern threat hunting In cybersecurity, we’re told that AI is the future of threat hunting. But the dirty secret is that…
Supply chain attack against GitHub Action triggers massive exposure of secrets
Security researchers are warning of a supply chain attack against tj-actions/changed-files GitHub Action, which is used in more than 23,000 repositories. A malicious commit was…