APT37’s Ruby Jumper toolkit represents a significant leap in cyber espionage capabilities, enabling the North Korean-linked threat group to infiltrate previously secure air-gapped networks. Known also as ScarCruft or Ruby Sleet, APT37 has been observed enhancing its infiltration techniques with this innovative toolkit, which facilitates unauthorized access across network barriers that are typically isolated for […]
CyberStrikeAI breaches Fortinet FortiGate devices, posing a significant security threat as hackers leverage this AI-driven offensive tool. Developed by a China-based individual, this open-source platform integrates over 100 security tools and is designed in Go. With features like an intelligent orchestration engine and a centralized dashboard, CyberStrikeAI lowers the technical barrier for large-scale cyber attacks. […]
Iran opens a new chapter in cyberwarfare, signaling intensifying threats that demand vigilance. Analysts caution that this escalation marks a shift in digital aggression, suggesting heightened cyber activities will persist for the foreseeable future. Iran’s cyberwar ambitions raise global concerns, urging nations to bolster defenses against potential intrusions. Cybersecurity experts advise governments and corporations worldwide […]
The US, Israel, and Iran have engaged in a fierce cyberwarfare exchange, inflicting digital damage on each other’s critical infrastructure. This ongoing conflict has seen cyberattacks from both sides, deploying wiper malware, and executing distributed denial-of-service (DDoS) operations. These tactics aim to disrupt essential services and create chaos in their adversaries’ digital landscapes. Pro-Western hackers […]
Toyota and several other major car manufacturers face scrutiny as researchers expose vulnerabilities in their tire pressure monitoring systems. A study by IMDEA Networks captured millions of signals from vehicles using basic equipment costing only $100. Manufacturers such as Mercedes, Hyundai, and Renault are also under the spotlight as their direct TPMS broadcast unencrypted data, […]
Europol’s Project Compass has led to the arrest of 30 individuals, significantly disrupting The Com, a cybercrime network known for exploiting young people. This yearlong initiative, coordinated by Europol’s European Counter Terrorism Centre, involved 28 nations working together to address these threats. The Com, primarily comprised of 16 to 25-year-olds, operates across social media, messaging […]
Link11 warns DDoS attacks have solidified as a persistent menace, according to its newly released European Cyber Report 2026. The report highlights the increasing frequency and sophistication of these attacks, which pose a relentless threat to organizations across the continent. Link11’s findings underscore the urgent need for enhanced cybersecurity strategies to counteract the evolving tactics […]
UFP Technologies warns customers of a recent cyberattack that has compromised its information technology systems. The American company, recognized for producing medical devices, disclosed that unauthorized access led to data theft. This breach raises concerns about potential impacts on both the company’s operations and its clients’ confidentiality. UFP Technologies has initiated an investigation to assess […]
SolarWinds has released patches for four critical vulnerabilities in its Serv-U software. These security issues could allow attackers to execute remote code if they gain administrative privileges. Addressing the vulnerabilities is crucial to prevent potential exploits that might compromise system integrity. The patched defects underscore the ongoing need for vigilance in cybersecurity, particularly for companies […]
In recent findings, security researchers uncovered a significant flaw in Anthropic’s Claude Code, allowing remote code execution and API key theft when users access untrusted repositories. The Check Point Research team identified critical vulnerabilities, CVE-2025-59536 and CVE-2026-21852, that can exploit features in Claude Code for malicious purposes. By leveraging project-level configuration files, attackers can initiate […]
Google disrupts a major cyber espionage campaign linked to suspected Chinese state actors, impacting telecommunications and government entities worldwide. This operation, run by a group tracked as UNC2814, went undetected for nearly a decade. Google’s Threat Intelligence Group (GTIG) and Mandiant have collaborated to dismantle the group’s infrastructure that breached 53 organizations across 42 countries. […]
Anthropic says MiniMax, along with DeepSeek and Moonshot AI, orchestrated extensive distillation attacks on its Claude models, involving over 24,000 fake accounts and generating 16 million exchanges. The San Francisco-based AI firm detailed how these Chinese labs employed proxy services to engage in massive data extractions, allegedly refining their own AI with capabilities stolen from […]