A massive security scan of Docker Hub has revealed a shocking leak of live credentials. Over 10,000 public container images are exposing API keys, many granting access to production systems at major companies.
A disturbing report highlights how AI is being used to create harmful content at scale. Despite millions of likes, TikTok’s moderation appears to be failing to catch it, raising serious safety questions.
A new cybersecurity report reveals a disturbing trend: malicious employees are teaming up with dark web actors. They’re selling access to sensitive user data and account recovery services, putting millions at risk.
Cybersecurity researchers have uncovered a clever new attack that uses legitimate links to AI chatbots like ChatGPT to deliver malware. The scheme, called a “ClickFix” attack, tricks users into running malicious commands themselves, bypassing traditional security warnings entirely.
A Tech Transparency Project report reveals a major gap in app store screening. Dozens of apps from US-sanctioned Russian and Chinese entities were found, with Apple hosting many more than Google and being slower to remove them.
Cybersecurity researchers have detailed a sophisticated new DeadLock ransomware attack. It uses a vulnerable driver to kill security tools at the kernel level before deploying its payload. The attackers use Session Messenger for anonymous ransom negotiations.
Google is deploying a second AI “critic” model to monitor its Gemini agent in Chrome, aiming to block actions from indirect prompt injection attacks. This comes after the company acknowledged the browsing assistant could be tricked into doing things users didn’t ask for.
A newly disclosed vulnerability in Splunk for Windows, rated CVSS 8.0, allows authenticated local users to gain full SYSTEM-level control. The flaw stems from overly broad file permissions set during installation and impacts both Splunk Enterprise and Universal Forwarder. Organizations are urged to
A joint US-Canadian cybersecurity advisory reveals Chinese state-sponsored hackers are deploying a sophisticated backdoor called BRICKSTORM on VMware vCenter and ESXi servers. The malware, written in Go, has gone undetected for an average of 369 days, allowing attackers to move laterally through net
The UK Home Office is proposing a new legal framework to govern police use of live facial recognition and other biometrics. Critics warn the plan, backed by millions in funding, will lead to a massive expansion of public surveillance.
