⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said. Its researchers found more than 13,000 internal images from developers at over 300 organizations, including customer billing records and screens of features not yet released.
This article reports on a study by Northeastern University and Consumer Reports that tested 21 cars and their companion apps, revealing widespread connections to advertising and tracking companies. The research found that some apps shared sensitive personal data, highlighting the privacy costs of modern vehicle connectivity and the difficulty drivers face in opting out.
Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products.
This article explores the hidden supply chain of residential proxies, where cybercriminals use legitimate home IP addresses to route malicious traffic. It details how brokers acquire these IPs from unsuspecting users and sell access to threat actors, enabling attacks that bypass conventional security measures.
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure.
Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a previously undocumented backdoor referred to as “Antino” in developer artifacts. Talos first observed UAT-11587 activity in September 2025.