Microsoft uncovered a new cyber threat dubbed “SesameOp,” a stealthy backdoor that exploits OpenAI’s Assistants API to conduct command-and-control operations. Unlike conventional malware that uses standard communication channels, SesameOp leverages the AI interface to evade detection, prompting concerns about novel abuse vectors. Microsoft uncovers OpenAI abuse in this context as part of a broader analysis […]
Cybersecurity firm PQShield has joined forces with government IT solutions provider Carahsoft to expand access to post-quantum cryptography tools across U.S. government agencies. The collaboration, which sees PQShield Carahsoft bring quantum-ready encryption solutions to the public sector, aims to strengthen defenses against future quantum computing threats. The partnership allows federal, state and local agencies to […]
A coordinated cyberattack campaign has surfaced on YouTube, where a network dubbed the YouTube Ghost Network malwarenaturally has been distributing infostealer malware through thousands of deceptive videos. According to cybersecurity researchers, the operation involves over 3,000 fraudulent videos uploaded across hundreds of compromised or fake YouTube channels. These videos, often disguised as tutorials or free […]
North Korean hackers have been caught on video using artificial intelligence filters to disguise their identities during fake job interviews, according to a report by cybersecurity news outlet Hackread. In a concerning new tactic, the hackers used AI-generated visuals to appear as legitimate job candidates, deceiving potential employers. This represents the latest instance in which […]
Zscaler continues to strengthen its artificial intelligence capabilities as it expands its cybersecurity portfolio. Zscaler buys Splx, adding another AI-focused company to its roster shortly after acquiring Red Canary, a threat management firm that also leverages machine learning. The move reflects Zscaler’s broader strategy to integrate advanced AI tools into its cloud security offerings. The […]
Japanese retailer Askul confirmed a data breach following a cyberattack linked to a Russian hacking group. The company disclosed that the incident compromised contact and inquiry details from users of its e-commerce platforms—Askul, Lohaco and Soloel Arena. In addition, internal servers containing supplier-related information were also affected. Askul Confirms Data Breach as part of an […]
A newly uncovered surveillance tool, Dante spyware, has been tied to Memento Labs, a rebranded version of the controversial Hacking Team. Security researchers revealed that this advanced spyware is part of a broader cyber-espionage toolkit, signaling the group’s continued activity under a new identity. The spyware’s infrastructure and methods suggest links to a threat actor […]
SK Telecom reported a 90% drop in operating profit, citing the financial toll of a recent cyberattack that compromised personal data from roughly 27 million customers. The disclosure, made in April, revealed the extent of the breach and the resulting burden of compensation and recovery efforts. SK Telecom profit plunges as the company grapples with […]
Microsoft has resolved a persistent issue in Windows 11 that confused users for years. The glitch, which affected the “Update and Shut Down” option, caused systems to restart instead of powering off as intended. This long-overdue correction means users can now confidently shut down their devices without surprise reboots. Microsoft fixes decade-old behavior that originated […]
China-linked hackers have launched a global cyber campaign targeting Cisco firewall devices, according to recent reports. The China hackers breach Cisco equipment to exploit vulnerabilities in network infrastructure, potentially compromising sensitive enterprise data across various sectors. Security researchers have observed a rise in sophisticated attack patterns linked to state-sponsored groups. The attackers focused on gaining […]
Hackers hijack sites using an authentication bypass flaw in JobMonster, a popular WordPress theme used for job board websites. Security researchers detected active exploitation of this critical vulnerability, which makes it possible for attackers to take over administrator accounts under specific conditions. The flaw, tracked as CVE-2025-5397, is one of three major vulnerabilities disclosed in […]
Google’s November 2025 Android Security Bulletin highlights a critical zero-click remote code execution vulnerability identified as Android flaw CVE-2025-48593. This exploit affects the System component and targets Android versions 13 through 16. Because the flaw requires no user interaction to execute malicious code, it poses a significant threat to millions of devices across the ecosystem. […]