Open-source security is posing challenges governments can’t easily solve
An epidemic of cyberattacks on open-source software has mounted in recent months, making clear how uniquely difficult it is to protect the publicly available code,…
Latest Cybersecurity News — Page 452
View all →
Denmark must pay telecoms firm US$12m for Huawei equipment removal: court
A Danish court has ordered the state to pay 80 million Danish kroner (US$12 million) in compensation to TDC NET, the country’s largest digital-infrastructure operator,…
How a malicious AI agent skill passed security checks and reached 26,000 users
Once the skill had gained distribution, AIR changed the content behind the fake Stitch documentation. The revised page instructed agents to download and run a…
How AI is Rewriting the SecOps Playbook
AI is changing the economics of both software development and cyberattacks. Organizations are shipping code faster than ever, increasingly with the help of AI agents…
CISA warns of max severity Ubiquiti flaws exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers actively exploiting flaws in Ubiquity UniFi OS and Lantronix serial-to-ethernet servers. According to the BOD 26-04 directive,…
PoC Exploit Released for Microsoft Exchange Server Elevation of Privilege Vulnerability
A public proof-of-concept exploit is now available for CVE-2026-45504, a high‑severity server-side request forgery vulnerability in Microsoft Exchange Server that enables privilege escalation via arbitrary…
Invisible By Design: Making Quantum-Safe Encryption The Easy Path
Day-to-day communication still happens inside familiar, tried-and-true tools such as email, browsers, and collaboration apps. At the same time, privacy and compliance pressures keep rising.…
ModeloRAT and Mistic Backdoor Activity Linked to Ransomware Initial Access Broker
The Python-based remote access trojan ModeloRAT and a newly observed stealth backdoor, dubbed Backdoor.Mistic, to activity consistent with an initial access broker (IAB) operation that…
Fake npm Packages Impersonate PostCSS Tool to Steal Chrome Passwords
Cybersecurity research firm JFrog reveals a new technique in its latest report that cybercriminals are using to target software developers, tricking them into downloading remote…
AEV, BAS, Or Pentesting: Which Security Validation Solution Is Right for You?
24 Jun AEV, BAS, Or Pentesting: Which Security Validation Solution Is Right for You? Posted at 08:23h in Blogs by Taylor Fox This week in…
Algerian national accused of running cybercrime marketplaces extradited to US
An Algerian national accused of running online marketplaces that sold phishing kits and fraud tools has been extradited from Spain to the United States to…
“Total access to all your devices.” Sextortion scammers strike again
At the moment, we’re seeing all kinds of sextortion emails. The scam is cheap to run, easy to automate, and apparently profitable enough that cybercriminals…