Cybersecurity

Cisco Patches Critical Flaws in Catalyst SD-WAN, IOS XE

Cisco disclosed multiple critical vulnerabilities in Catalyst SD-WAN and IOS XE Software, discovered during internal security testing using frontier AI models.The flaws include improper...

WebKit bug lets websites bypass iCloud Private Relay, leak IP

Cybersecurity researchers Talal Haj Bakry and Tommy Mysk disclosed a WebKit vulnerability that bypasses Apple's iCloud Private Relay.Three specific features in WebKit—DNS prefetching, WebAuthn,...

Ransom Cartel kingpin sentenced to 16 years in prison

Maksim Silnikau, a Belarusian national, was sentenced to 16 years in prison for running the Ransom Cartel ransomware-as-a-service operation.The scheme targeted at least 18...

MacOS ClickFix Campaign Uses Fingerprinting to Hide Malware Lures

A macOS ClickFix campaign uses over 250 front-end domains to deliver information-stealing malware to targeted users.The attack employs a server-side fingerprinting gate that hides...

CISA Adds 3 Exploited Flaws to KEV Catalog, Urges Fixes by Aug 7

CISA added three actively exploited vulnerabilities to its KEV catalog on August 5, 2026Critical Langflow code injection flaw (CVE-2026-9198, CVSS 9.8) enables unauthenticated remote...

Google deletes AI agent workflows after prompt injection attack

Pillar Security discovered a prompt-injection attack that could trick Google's ADK triage agent into triggering a privileged code-fixing workflow.By exploiting a public GitHub issue,...

Chinese Hackers Use Leaked DarkSword Kit to Target iOS

An unknown Chinese threat actor is targeting iOS devices using a publicly leaked version of the DarkSword exploit kit.Over 100 malicious web properties, mostly...

FaceHugger flaws in Hugging Face Diffusers allow AI supply chain attacks

Three high-severity vulnerabilities, collectively named FaceHugger, were disclosed in Hugging Face's Diffusers library, allowing arbitrary code execution on machines that load crafted model repositories.The...

Latest news

Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.

Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...

Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached

Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...

CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV

CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...