Global Cybersecurity Alert: Kiteworks Issues Urgent Six-Hour Server Deactivation Directive Amidst Imminent Zero-Day Threat Intelligence

A prominent provider of secure file transfer and communication solutions, Kiteworks, has disseminated an urgent directive to its extensive worldwide customer base, recommending a temporary, six-hour server shutdown this weekend.…

Digital Asset Exchange Bitget Suffers $351.6 Million Heist, North Korean Cybercriminals Suspected

A sophisticated cyberattack has resulted in the expropriation of approximately $351.6 million from the operational "hot" and "warm" digital asset wallets of Bitget, a prominent cryptocurrency exchange, with initial forensic…

Chinese hackers exploit WordPress, Zyxel flaws to steal govt data

A sophisticated, state-sponsored cyber espionage group, believed to originate from China, has been observed conducting an extensive campaign exploiting a diverse array of software and hardware vulnerabilities, including critical flaws…

Urgent Directive Issued as CISA Flags Actively Exploited Critical Linux Kernel Vulnerabilities

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-priority alert, warning organizations about the immediate and active exploitation of three distinct vulnerabilities within the Linux kernel, one…

Cloud Commerce Platform BigCommerce Grapples with Supply Chain Breach Via Compromised Third-Party Application Credentials

Leading cloud-based e-commerce provider BigCommerce has initiated notifications to numerous merchants regarding a significant data incident stemming from the compromise of credentials associated with Ribon, a third-party application, which attackers…

Evolving Threat Landscape: Malicious npm Packages Execute Covert Operations by Evading Install-Time Defenses Through Runtime Subterfuge

A recent and extensive malicious campaign targeting the widely used npm ecosystem represents a significant advancement in software supply chain attacks, as threat actors increasingly circumvent established install-time security measures…

Unprecedented Global Infiltration: North Korea’s WaterPlum Group Exploits Job Seekers, Stealing Millions for State Programs

An unprecedented multinational security alert has detailed a sophisticated and far-reaching cyber espionage and financial illicit operation orchestrated by the North Korean state-sponsored group known as WaterPlum, revealing the compromise…

Exploiting Integrated AI: A Novel Attack Vector Subverts Browser Agents Through Malicious Extensions

A significant new security vulnerability has emerged, demonstrating how malevolent browser extensions can commandeer the built-in artificial intelligence assistants within leading web browsers, potentially compromising sensitive user data and executing…

Major Security Compromise at Gyazo Exposes Millions of User Records and Sensitive Content Metadata

A significant security incident has impacted Gyazo, a widely utilized cloud-based screen capture and sharing service, leading to the unauthorized acquisition of approximately 23.6 million user records. This extensive breach,…

Advanced Android Threat RatHat Employs AI for Unprecedented Device Control and Data Harvesting

A novel strain of Android malware, identified as RatHat, has emerged as a significant threat, distinguishing itself through an innovative AI-driven subsystem that facilitates autonomous remote navigation and comprehensive control…