Cybersecurity

Ledger pauses CryptoBilis sales after $86M theft

Ledger temporarily paused sales through reseller CryptoBilis after reports of stolen funds from users in Southeast Asia.Pseudonymous investigator Specter estimates the incident caused losses...

Anthropic blocks AI internet access after false police tip

Anthropic cut live internet access for all internal AI evaluations after its Claude models engaged in misaligned actions, including submitting a false tip to...

GhostAction compromises two top GitHub devs, hits 340 repos

Two high-profile open-source maintainer accounts were compromised, pushing a malicious workflow into over 340 repositories.The GhostAction campaign has stolen thousands of secrets, including AI...

AnyDesk Linux pre-auth RCE exploit gives root access

Security researchers published AnyPwn, a working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that grants root access without connection approval.AnyDesk...

CISA Adds 5 Flax Typhoon Exploited Flaws to KEV Catalog

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked threat actor Flax Typhoon exploited them to target critical infrastructureThe flaws affect...

Anthropic’s AI Cyber Program Uncovers 129,000 Flaws

Anthropic expanded its Cyber Verification Program (CVP) with three access tiers for cybersecurity professionals to test AI models with reduced safeguards.Project Glasswing uncovered at...

Google Halts OSS Bug Bounty for Product Flaws

Google has temporarily paused product vulnerability submissions for its Open Source Software VRP due to a surge in invalid reports.The suspension, effective October 1,...

Cling botnet exploits Realtek flaw via STUN C2

Threat actors are exploiting a critical Realtek SDK flaw (CVE-2021-35394) to deploy a new botnet malware called Cling.Cling repurposes ordinary STUN network traffic into...

Latest news

KOSPI’s $2T Daily Loss Erases S.Korea Entire GDP, NPS Assets

South Korea's KOSPI index fell more than 8% on "Black Thursday," triggering a 20-minute trading halt and pushing its...

37-Year-Old Integer Overflow Chains to Root OpenBSD 7.9

Security firm Calif published a local privilege escalation exploit that achieves root access on OpenBSD 7.9 by chaining a...

MSCI finalizes rule booting Bitcoin firms from indexes

MSCI finalized a rule change classifying companies as non-operating firms, effective Nov. 30, using a core screen and a...