Cybersecurity, AI, etc.
What happened: Cohesity announced Agent Resilience, a product initiative aimed at protecting and recovering infrastructure used by AI agents. This is a vendor announcement; organizations should evaluate the claimed capabilities…
What happened: Channel Insider reported that only 10% of respondents to a survey expressed confidence in meeting a proposed 24-hour cyber-incident reporting requirement associated with the UK Cyber Bill. Why…
What happened: The Indian Express reported that Z.ai disabled features in its AI coding assistant following a security issue. The report underscores the sensitivity of coding assistants, which may handle…
What happened: CyberInsider reported on PAYLOAD ransomware activity that reportedly uses Windows Group Policy as part of attacks designed to cause disruption without relying on traditional bulk file encryption. The…
What happened: Multiple cybersecurity outlets reported that the ShinyHunters group claimed control of infrastructure associated with the Cl0p ransomware operation’s leak site and used it to demand payment. The claims…
A PAYLOAD operation used malicious Group Policy Objects to disable defenses and disrupt a Windows domain without deploying a conventional ransomware encryptor.
SentinelOne linked North Korean group Jade Sleet to an Indian IT services compromise involving a DevOps engineer’s Mac and two Rust-based macOS backdoors.
A newly documented Node.js remote-access trojan uses ClickFix lures and a Polygon smart contract to discover active WebSocket command-and-control infrastructure.
CISA added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in kernel TLS, AF_ALG and bridge Netfilter code.
Attackers are using convincing recruiter personas, fake video-call problems and malicious code to target Rust team members and popular crate owners.