OpenAI’s ChatGPT is rolling out a new feature for its Deep Research tool, allowing users to download research outputs as PDF files. The capability addresses a longstanding user demand for easier sharing and archiving of complex, multi-step research conducted within the platform. Deep Research is designed to assist users with in-depth analysis across layered queries, […]
Andy Frain Services, an Illinois-based provider of physical security services, suffered a data breach in October that exposed personal information of more than 100,000 individuals, according to a report by *SecurityWeek*. The cyberattack was allegedly carried out by the Black Basta ransomware group, which claimed responsibility for compromising approximately 750 gigabytes of the company’s files. […]
A recent update to the Tycoon 2FA phishing kit reveals the deployment of new evasion techniques, including browser fingerprinting and enhanced payload encryption, signaling a continued evolution in cybercriminal tactics. The kit, designed to bypass two-factor authentication (2FA), now incorporates methods that make detection and mitigation increasingly difficult for security systems. Browser fingerprinting allows attackers […]
A widening cyberattack targeting Europe’s largest software maker has revealed hundreds of global victims, drawing comparisons to previous state-sponsored campaigns such as Salt Typhoon and Volt Typhoon. The assault, which exploited a zero-day vulnerability, has impacted organizations across multiple sectors, though specific industries and affected regions have not been disclosed. Security experts note the scale […]
The SANS Institute has introduced ICS613, a new hands-on operational technology (OT) penetration testing course designed to bolster cybersecurity for critical infrastructure environments. The course provides practical training using real industrial control system (ICS) hardware and systems, equipping cybersecurity professionals with the skills needed to identify and mitigate vulnerabilities in OT networks. ICS613 focuses on […]
A newly identified Windows-based botnet malware dubbed HTTPBot has launched a wave of cyberattacks targeting organizations in China’s gaming, technology, and education sectors, according to a report from The Hacker News. The intrusions, which have been steadily increasing over the past several months, have totaled at least 200 confirmed incidents since April. The HTTPBot malware, […]
Adidas has confirmed that a data breach involving a third-party customer service provider has exposed certain information belonging to its consumers in South Korea, according to a report by BusinessKorea. The sportswear giant did not disclose the specific nature or volume of the compromised data but acknowledged that the breach stemmed from an external vendor […]
A data breach at IT services provider Serviceaide has compromised the personal information of approximately 483,000 patients affiliated with Catholic Health, highlighting the growing risks associated with third-party vendors in the healthcare industry. According to security experts, the incident demonstrates how healthcare organizations remain vulnerable when external service providers experience system failures or security lapses. […]
Security researchers have published a proof-of-concept (PoC) exploit for a critical vulnerability in Fortinet products, identified as CVE-2025-32756. The release underscores the urgency for organizations to patch affected systems immediately, as the public availability of the exploit code significantly raises the risk of widespread attacks. The flaw affects Fortinet’s widely used network security solutions, though […]
MathWorks, the company behind the widely used MATLAB software, has confirmed that a ransomware attack is responsible for an ongoing service disruption affecting its operations. The incident has led to sustained outages, though the company has yet to disclose the full extent of the impact or a timeline for restoration. The attack has disrupted access […]
Cybercriminals are leveraging spoofed emails purportedly from the U.S. Social Security Administration (SSA) to trick recipients into installing the ScreenConnect remote access tool (RAT), according to cybersecurity researchers. The phishing campaign uses fake SSA warnings to create a sense of urgency and prompt users to download a malicious attachment or click on a link that […]
A proof-of-concept (PoC) exploit has been released for CVE-2024-26809, a critical vulnerability affecting the Linux kernel’s nftables subsystem. The flaw, which allows local privilege escalation, stems from a double-free bug in the nft_pipapo_destroy() function of the netfilter module. Exploiting this involves manipulating overlapping elements in the nft_set_pipapo structure, corrupting the kernel heap and enabling attackers […]