Latest News

Threat actors are abusing Ray’s lack of authentication to compromise exposed clusters and deploy LLM-generated payloads and cryptocurrency miners.

AI has given cybercriminals the ability to operate like Fortune‑500‑scale marketing departments—except their product is account takeover, data theft, and identity fraud.

Microsoft said the DDoS attack was aimed at an endpoint in Australia and reached 15.72 Tbps and 3.64 Bpps.

An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system.

Microsoft announced new security capabilities for Defender, Sentinel, Copilot, Intune, Purview, and Entra. 

Major online services such as ChatGPT, X, and Shopify were disrupted in a global Cloudflare outage on Nov. 18th, as well as transit and city services. 

Britain’s domestic intelligence agency warned that Chinese nationals were ”using LinkedIn profiles to conduct outreach at scale” on behalf of the Chinese Ministry of State Security.

The total amount of money given to bug bounty hunters by the social media giant has reached $25 million.

The company will use the investment to accelerate product development, expand go-to-market operations, and hire new talent.

The fresh investment will be used to accelerate product innovation and to expand the company’s go-to-market efforts.

The Inc Ransom group has taken credit for the hack, claiming to have stolen several terabytes of data. 

Hackers accessed a database containing information about alumni, donors, faculty, students, parents, and other individuals.

A threat actor exploited a vulnerability, exfiltrated data, and attempted to extort Eurofiber.

The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor.

The state-sponsored APT has been targeting the victims’ family members to increase pressure on their targets.