The NPM ecosystem is under attack once again, with a sophisticated supply chain compromise targeting the widely-used @ctrl/tinycolor package and over 40 other JavaScript packages. […]
Category: Cyber Security News
0-Click Linux Kernel KSMBD Vulnerability Enables Remote Code Execution via N-Day Exploit
A recent vulnerability in the Linux Kernel’s KSMBD module allows an attacker to execute arbitrary code on a target system without any user interaction. KSMBD […]
CISOs grapple with the realities of applying AI to security functions
Applying artificial intelligence to strengthen cybersecurity defenses — partially propelled by industry hype — has quickly risen to the top of the agenda for many […]
Microsoft Resolves Bluetooth Audio Problem in Windows 11 24H2 Update
Microsoft has addressed a widespread audio issue affecting Bluetooth speakers, headsets, and integrated laptop speakers in Windows 11 version 24H2. The problem stemmed from an […]
Open Source CyberSOCEval Sets New Benchmark for AI in Malware Analysis and Threat Intelligence
Open Source CyberSOCEval, a newly launched evaluation platform, is making waves in the cybersecurity community by demonstrating how artificial intelligence can transform malware analysis and […]
40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
Cybersecurity researchers have flagged a fresh software supply chain attack targeting the npm registry that has affected more than 40 packages that belong to multiple […]
How the Marine Corps slashed IT delays by shifting to DevOps and agile development
The U.S. Marine Corps is celebrated for its precision and ability to adapt on the battlefield. But behind the IT scenes, another battle was taking […]
KillSec Ransomware Hits Brazilian Healthcare Software Provider
The ransomware gang breached a “major element” of the healthcare technology supply chain and stole sensitive patient data, according to researchers. ​The original article found […]
FBI Warns of Threat Actors Hitting Salesforce Customers
The FBI’s IC3 recently warned of two threat actors, UNC6040 and UNC6395, targeting Salesforce customers, separately and in tandem. ​The original article found on darkreading […]
Delmia Apriso customers face patching emergency after CISA warns of exploit
Attackers have been spotted targeting a critical remote code execution (RCE) vulnerability in a key manufacturing management platform used by some of the world’s largest […]