Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Third-party applications connected to Google Workspace can retain access long after their original purpose is forgotten. This webinar examines how overly permissive integrations contribute to breaches and which security controls can help fast-growing companies reduce their exposure.
French authorities have detained an 18-year-old suspected member of the ZeroBytes hacking group following an investigation into cyberattacks targeting French organizations. The suspect is accused of participating in distributed denial-of-service attacks, data breaches, and defacement campaigns.
Threat actors are increasingly switching from AI-powered coding assistants to building custom AI frameworks designed specifically for malware development and credential theft. These AI frameworks help attackers automate phishing campaigns, generate convincing lures, and analyze stolen credentials at scale.
CISA has released an advisory (ICSA-26-251-01) regarding vulnerabilities in CareCam Pro IP Cameras, including the ANJIA AJL33PC0801 model running firmware linux_202008261138_svn13796 with U-Boot 2010.06 bootloader. Successful exploitation of these vulnerabilities could allow an attacker to take full control of the affected device.
A Chinese-language cybercriminal group is compromising Brazilian government and education websites to host phishing pages targeting financial institutions. The attackers exploit vulnerabilities in outdated CMS installations to upload fake banking login pages that steal credentials from Brazilian customers.
A municipal utility company in Bavaria, Germany is recovering from a cyberattack that encrypted internal systems and disrupted operations. The attack affected the utility ability to provide services to customers.