Cyber ​​Security Hub

Beginning with a vulnerability in an auxiliary tool, the supply chain attack targeting LiteLLM rapidly expanded, threatening numerous technology systems worldwide.

Cybersecurity experts have recently detected a sharp surge in scanning activity targeting VMware vCenter systems. This serves as an early warning signal that threat actors are actively hunting for unpatched targets in preparation for dangerous intrusion attempts.

The discovery of RovoBlast - a severe security vulnerability in the Atlassian Rovo AI assistant serves as proof that an enterprise's internal data can be exfiltrated through a single malicious link.

Metabase has confirmed a critical cybersecurity incident involving an actively exploited zero-day vulnerability.

Two familiar yet crucial defensive tools that every organization must thoroughly understand are IDS (Intrusion Detection System) and IPS (Intrusion Prevention System).

Cybersecurity experts have recently uncovered a new attack technique called "Pass-ta-key," which enables malware to compromise and hijack accounts even when secured by Passkeys.

A critical security vulnerability has recently left many Coldcard wallet users completely drained of their assets, with total losses surpassing $130 million in cryptocurrency.

Capitalizing on victims' anxiety and their desperate desire to recover lost assets, cybercriminals turn them into prime targets in a new fraud chain known as a Recovery Scam.

Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.

A dangerous cyber attack campaign targeting Microsoft Outlook Web Access (OWA) systems has recently been discovered, directly threatening government agencies in the US and Europe.

A recent security incident involving Claude has sent shockwaves through the tech community, as a vast amount of private user data was unexpectedly indexed and exposed publicly by Google Search.

As digital threats become increasingly sophisticated, more than 30 of the world's leading technology corporations - have joined forces to establish the Open Secure AI Alliance.

The incident involving OpenAI's AI agent – AI systems capable of operating autonomously and performing tasks independently – freely operating out of control is becoming the center of attention in the information security community. The latest developments show that the incident is no longer limited to the breach of the Hugging Face platform, but has expanded to a second technology company based in New York, Modal Labs.

The notorious extortion group ShinyHunters recently publicly claimed responsibility for the data leak at EY, leaving the enterprise facing a severe cybersecurity challenge.

An incident involving Claude AI's link-sharing feature exposed a vast number of private user conversations publicly on search engines. This event has sparked concern across the tech community and served as a warning about data security risks when interacting with artificial intelligence.

In an effort to prevent hackers from leveraging artificial intelligence (AI) to execute cyberattacks, major tech corporations have established highly stringent regulations. However, these defensive measures have inadvertently become major barriers for cybersecurity professionals themselves.

Vietnam’s Ministry of Public Security proposes fines of up to 5% of revenue for particularly serious violations involving important or core data.

A recent report from cybersecurity organization Mindgard has highlighted a dangerous vulnerability in the Windows version of Cursor application, allowing malicious actors to execute code directly on developers' machines.

Trusting official government domains or vetted emails is a common habit for many internet users. However, the hackers behind the dangerous campaign dubbed PhantomEnigma are turning this very trust into a sophisticated attack tool.

On Thursday (June 16), a routing incident deep within the Amazon Web Services (AWS) system abruptly disrupted the operations of thousands of websites worldwide. For over three hours, users attempting to access these platforms received only system error messages, triggering a minor wave of internet chaos before Amazon timely contained and resolved the situation.