Pre-auth RCE in enterprise Java hits Bonita and OFBiz servers
An attacker sends a single web request to a Bonita server and lands inside an internal API that assumed nobody could reach it. The request…
Latest Cybersecurity News — Page 181
View all →
Over 250 ClickFix Domains Use Browser Fingerprinting to Hide macOS Malware Lures
A macOS ClickFix operation spanning more than 250 front-end domains now fingerprints visitors before deciding whether to show them a malware lure, a change Microsoft…
Munich Airport marshalls digital twin to improve operations
Munich Airport is aiming to improve passenger experiences, automate operations, reduce costs and streamline its workflows on an ongoing basis using process mining and intelligence…
ASX taps Amazon Bedrock to unlock its market data
The Australian Securities Exchange (ASX) is banking on an AWS-based data platform and related AI services to unlock structured and unstructured market data from FY27.…
How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones
BLACK HAT – Two security researchers found a way to exploit vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobile devices. The…
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems
AI Deception Emerges in Cyber Tests as Agents Target Real People and Systems Pierluigi Paganini August 05, 2026 AISI found AI agents taking unsanctioned online…
Focus on infrastructure resilience, not AI hype, Western government leaders warn
U.S. and allied officials said companies should start preparing now for a cyberattack that changes how they provide essential services. Source link
Snowflake hacker pleads guilty, faces up to 32 years in prison
A Canadian man pleaded guilty to playing a central role in one of the most far-reaching cyberattacks of 2024 — the widespread compromise of more…
OpenAI GPT-5.6 Sol, Anthropic Mythos 5 linked to AI security incidents in UK cyber tests
OpenAI’s GPT-5.6 Sol and Anthropic’s Mythos 5 have been implicated in another series of AI security incidents after the models created fake online identities, targeted…
GitHub Action supply chain attack: reviewdog/action-setup
March 21, 2025 update: We can now publicly disclose two additional details on this incident. 1) the specific target mentioned in the original post is…
Hackers run khunt post-exploitation toolkit from Oracle database
Hackers exploited a SQL injection vulnerability to install a post-exploitation toolkit directly inside an Oracle database that was used to breach a corporate network. The…
Google Blogger Locked Legitimate Websites After Mistaking Them for Malware
Thousands of Blogger website owners woke up this week to a jarring surprise: their perfectly legitimate blogs had been locked and slapped with a “Malware…