Defense Contractor Employee Sentenced for Selling Zero-Day Exploits
An Australian national has been sentenced for selling eight zero-day exploits to a Russian broker, impacting U.S. national security.
Tag Cybersecurity
LLM security: Risks Associated with Exposed Endpoints in LLM Infrastructure
As organizations increasingly deploy Large Language Models (LLMs), the security risks associated with exposed endpoints are becoming more pronounced. This article examines how these vulnerabilities can be exploited and the importance of managing endpoint privileges.
Weekly Cybersecurity Recap: Key Incidents and Vulnerabilities
This week’s cybersecurity landscape reveals significant vulnerabilities and incidents affecting various sectors, including a zero-day exploit in Dell RecoverPoint and the emergence of new malware targeting Android devices.
CISA Identifies Two Roundcube Vulnerabilities Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency has added two significant vulnerabilities in Roundcube webmail software to its Known Exploited Vulnerabilities catalog, highlighting the urgency for remediation.
AI-Driven Cyber Attacks Target Over 600 FortiGate Devices Globally
A financially motivated threat actor has compromised more than 600 FortiGate devices across 55 countries, leveraging AI tools to exploit weak security measures.
GAO Urges NSF CIO to Enhance Tech Procurement Practices
The Government Accountability Office has called on the National Science Foundation's CIO to improve technology procurement and management, emphasizing accountability and standardization.
Volt Typhoon: New Threat Groups Target Critical Infrastructure Amid Ongoing Chinese Cyber Activities
A recent report from Dragos highlights the persistent threat posed by Chinese-backed groups like Volt Typhoon, which continue to compromise U.S. energy networks, alongside the emergence of new threat actors targeting critical infrastructure.
Dell Zero-Day Vulnerability Exploited by China-Linked Attackers
A critical security flaw in Dell RecoverPoint for Virtual Machines has been exploited by attackers linked to China since mid-2024, raising concerns about long-term network access.
cloud security: Webinar on AI-Driven Cloud Forensics for Rapid Incident Response
A recent webinar highlighted the challenges of cloud forensics and the necessity of modern techniques to investigate breaches effectively.
SmartLoader Campaign Utilizes Trojanized Oura MCP Server to Distribute StealC Infostealer
A recent SmartLoader attack has been identified, leveraging a trojanized version of the Oura MCP server to deploy the StealC infostealer, targeting sensitive user data.
