A newly discovered ransomware strain known as CyberVolk has begun targeting Windows systems within critical infrastructure and scientific institutions, aiming at countries viewed as adversarial to Russian interests. Since its emergence in May 2024, the malware has caused widespread disruption in public services and research facilities across Japan, France and the United Kingdom. CyberVolk hits […]
Nucleus Security has introduced Nucleus Insights, an artificial intelligence-based threat intelligence platform aimed at helping cybersecurity teams prioritize vulnerabilities more effectively. As Nucleus launches AI tool capabilities through this new platform, organizations can now better determine which Common Vulnerabilities and Exposures (CVEs) require immediate focus and understand the reasoning behind each recommendation. The platform uses […]
The NSC cyber chief backs a shift toward more assertive U.S. cyber operations, signaling a strategic pivot in the government’s approach to digital threats. Speaking to Nextgov/FCW, the National Security Council’s senior cybersecurity director emphasized the need to intensify offensive cyber tactics while maintaining a strong focus on defensive capabilities to protect national infrastructure. The […]
A surge in fileless malware campaigns has brought renewed attention to AsyncRAT, a remote access trojan that exploits trusted system tools to launch in-memory attacks. By avoiding traditional disk writes, AsyncRAT evades detection and enables threat actors to maintain control over compromised enterprise systems with minimal forensic trace. Attackers gain initial access by abusing unauthorized […]
Cybersecurity researchers have uncovered a sophisticated cyberattack campaign targeting the Philippines, allegedly orchestrated by China using egg-themed malware. The operation, dubbed “EggStreme,” deployed in-memory malware crafted to evade detection while offering attackers a dynamic set of capabilities. Analysts say the malware’s unusual ovoid theme serves both as a signature and a distraction, cloaking its malicious […]
The Cybersecurity and Infrastructure Security Agency has updated its Known Exploited Vulnerabilities catalog to include critical flaws in Sitecore, the Linux Kernel, and TP-Link devices. The latest additions signal growing concern over actively exploited threats in popular software and hardware platforms. As part of the update, CISA flags Linux kernel vulnerabilities as a priority for […]
AI-driven threat validation is reshaping cloud security by reducing unnecessary alerts and streamlining responses. By incorporating AI Threat Tools Cutnaturally, organizations can cut through Cloud-Native Application Protection Platform (CNAPP) noise and zero in on the most critical risks. This targeted approach allows security teams to act faster and with greater precision. Cloud-native environments, while agile, […]
Hackers breached the systems of Salesloft and Drift after compromising GitHub repositories and stealing OAuth tokens, according to a report detailing the Salesloft Drift breach. The attackers gained unauthorized access by targeting developer credentials, enabling them to exploit the companies’ integration tools. The incident involved the abuse of OAuth tokens issued to third-party applications connected […]
Cyberattacks targeting global maritime operations have surged, with over 100 incidents linked to nation-state actors, ransomware groups, and hacktivists, according to new findings from cybersecurity firm Cyble. As maritime cyberattacks surge amid rising geopolitical tensions, adversaries are exploiting critical weaknesses in ships, ports, and offshore systems, forcing the industry to confront resilience and visibility gaps. […]
Hackers used an SAP flaw to breach a U.S.-based chemicals company’s network in April 2025, exploiting a now-patched vulnerability in SAP NetWeaver. The attackers deployed the Auto-Color backdoor on Linux systems over a three-day period, gaining unauthorized access and attempting to download suspicious files. The intrusion involved direct communication with malicious infrastructure linked to the […]
Microsoft unveiled a multi-layered security framework to address rising threats from indirect prompt injection attacks on generative AI systems. In a detailed strategy, Microsoft unveils AI defenses that combine hardened prompts, detection tools, and mitigation layers to safeguard large language model (LLM) applications in enterprise settings. These attacks, which embed malicious instructions within external data, […]
A cybercrime group known as Lionishackers has rapidly gained notoriety for infiltrating corporate databases and marketing stolen information on dark web forums and Telegram. Primarily targeting organizations in Asia, the group uses automated SQL injection tools to breach vulnerable systems. Lionishackers sell stolen data directly, bypassing traditional ransomware tactics in favor of monetizing raw records. […]