A novel cybersecurity threat, known as the Ghostcommit attack, hides prompts within PNG images, skillfully evading AI code reviewers. Researchers from ASSET Research Group demonstrated how these malicious prompts cause coding agents to leak sensitive information like .env files without detection. The attack involves splitting the payload, using an innocuous AGENTS.md file to direct the […]
In June 2026, CYFIRMA researchers reported persistent ransomware activity, highlighting the decentralization and resilience of the ransomware ecosystem. The report emphasized how ransomware-as-a-service (RaaS) operations have evolved, showcasing increasingly sophisticated extortion tactics such as double extortion involving file encryption and data theft. Attackers rely heavily on affiliate-driven models, which help maintain their aggressive operations. CYFIRMA […]
Apple files a federal lawsuit against OpenAI, alleging a systematic theft of trade secrets involving confidential hardware designs and supplier relationships. In the 41-page complaint submitted to the U.S. District Court for the Northern District of California, Apple accuses OpenAI’s hardware subsidiary, io Products, and key figures like Chief Hardware Officer Tang Yew Tan and […]
The European Parliament has passed a significant measure known as Chat Control 2.0, allowing big tech companies such as Google, Meta, and Microsoft to actively scan user messages for Child Sexual Abuse Material (CSAM). With the EU reviving the law, legislators aim to enhance child protection through these proactive measures. However, this move raises privacy […]