⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The NSA, CISA, and FBI have released a joint advisory warning that China-based AI companies including DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI have been conducting industrial-scale knowledge distillation campaigns against U.S. frontier AI models since at least late 2024. These companies extracted billions of tokens across millions of API requests from models including Claude, GPT, Gemini, and Grok to train their own R1, V3, Qwen, and other models, likely with Chinese government awareness.
Microsoft warned customers that Windows Server 2025 changes may cause application crashes for certain legacy software. The compatibility issues stem from changes in the Windows kernel and security defaults.
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their phone for it to work, but the caller must already be one of their WeChat contacts.
Chainguard has reached a milestone of 1 billion container builds, doubling its output from 500 million in just six months. The company attributes the growth to increased adoption of its secure software supply chain platform and growing enterprise demand for minimal vulnerability containers.
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says.
Cisco Talos began an investigation after observing a DLL named "verification.google" executing from WebDAV at a Ukrainian government organization. We assess with moderate confidence that the attacks are not targeted at a particular organization, but are a part of a cryptocurrency and credentials-stealing operation using the Amatera stealer as the primary payload.