A critical flaw in the Base44 AI Platform Auth flow has exposed users to significant security risks, according to a report from Infosecurity Magazine. The vulnerability allows threat actors to bypass Single Sign-On protocols, potentially registering and accessing private applications without proper authentication. Security researchers identified the issue within the platform’s authentication mechanism, which is […]
Ingram Micro is facing a renewed cybersecurity crisis this week as hackers threaten to leak 3.5 terabytes of stolen data. Despite the looming threat, the global IT distributor claims to have fully restored its worldwide operations, although certain regional websites are only now returning online. The company has not disclosed specific details about the compromised […]
Cybersecurity firm Avast has unveiled a new tool to help victims recover from FunkSec ransomware attacks. In a targeted effort, Avast unleashes FunkSec ransomware decryption support through a publicly available tool and is actively assisting dozens of affected organizations. The ransomware strain, described as short-lived, had impacted multiple victims before being disrupted. Avast collaborated closely […]
Google Project Zero plans to publicly disclose security vulnerabilities within seven days of reporting them to vendors, aiming to reduce delays in patch adoption. The policy shift targets what researchers describe as the “upstream patch gap,” where fixes exist but downstream vendors have yet to incorporate them into widely used products. By accelerating transparency, Google […]
U.S. organizations are paying more than ever to recover from data breaches, according to IBM’s latest annual report. IBM says data breach costs now exceed $10 million on average, marking a new record high for the country. The report highlights growing financial pressure on businesses as cyberattacks become more frequent and complex. The findings underscore […]
A new variant of the HOOK Android Trojan adds ransomware-like overlay screens to its capabilities, cybersecurity researchers revealed. The malware now deploys full-screen ransom messages that aim to pressure victims into making payments. This marks a significant evolution in the trojan’s tactics, blending traditional banking fraud with extortion. According to researchers from Zimperium zLabs, the […]
The U.S. Cybersecurity and Infrastructure Security Agency on Aug. 25 added three newly exploited vulnerabilities to its Known Exploited Vulnerabilities catalog, escalating concerns across enterprise IT teams. CISA flags Citrix Git flaws as active threats, highlighting their potential to compromise infrastructure if left unpatched. The vulnerabilities include CVE-2025-48384, a high-severity issue linked to Git, and […]
Several malicious applications managed to bypass Google’s security checks and land in the Google Play Store, raising concerns over the platform’s ability to screen threats effectively. Security researchers flagged the suspicious apps after users reported abnormal device behavior, including unexpected pop-ups and performance issues. Despite these findings, Google claims its advertising mechanisms remain secure and […]
A wave of coordinated scanning activity is targeting Microsoft RDP servers, according to internet intelligence firm GreyNoise. The firm reported nearly 1,971 unique IP addresses probing Remote Desktop Web Access and RDP Web Client login portals simultaneously, indicating an organized reconnaissance effort. This surge in scans points to a possible campaign aimed at identifying vulnerable […]
Researchers have discovered a new method to extract sensitive information by embedding hidden prompts within images that are downscaled before being processed by AI systems. This AI Image Hack Hides commands that, once interpreted by a large language model (LLM), trigger unauthorized data access without detection. The attack manipulates the image processing pipeline, exploiting how […]
Farmers Insurance disclosed a significant data breach affecting 1.1 million individuals, following a broader cybersecurity incident involving Salesforce. The Farmers Insurance Hack Hits has drawn attention to the ripple effects of third-party vulnerabilities, as attackers accessed personal data through compromised Salesforce systems. The insurer confirmed the breach but has not detailed what specific information was […]
French retail giant Auchan has disclosed a data breach that affected hundreds of thousands of customers tied to its loyalty program. The Auchan Data Breach Exposes sensitive information linked to user accounts, prompting concerns over potential misuse of customer data. The company confirmed the attack and is actively investigating the scope of the incident. The […]