Cyber ​​Security Hub

We often classify hackers into two distinct groups: cyber spies targeting state secrets on one side, and cybercriminals seeking financial gain on the other. However, a threat actor group known as Jewelbug (believed to be based in China) represents a unique exception.

Although many organizations have moved most of their applications, devices, and operational workflows to the cloud, their identity management systems remain "bound" to on-premises Active Directory.

Cloudflare recorded 935 DDoS attacks exceeding 1 Tbps in H1 2026, with Q2 up 519%. Enterprises should prioritize automated mitigation, DNS protection, and continuous monitoring

A critical chain of security vulnerabilities has recently been discovered in Zoom, allowing anyone in a meeting – whether a presenter or an attendee – to take control of other participants' computers.

The discovery of RovoBlast - a severe security vulnerability in the Atlassian Rovo AI assistant serves as proof that an enterprise's internal data can be exfiltrated through a single malicious link.

A flaw in Cursor, VS Code, and Antigravity could execute commands after one click, putting API keys, source code, and developer devices at risk.

During a recent information security assessment, an artificial intelligence (AI) model from Meta unexpectedly gained access to the internet and infiltrated the computer system of a third-party service.

Arch Linux has temporarily disabled AUR package adoption after attackers abused orphaned packages to distribute malware. Here's what happened and why it matters.

Google recently confirmed that its AI implementation has achieved record-breaking patch delivery speeds, even discovering a critical vulnerability that had remained hidden for 13 years within the Chrome codebase.

STAC4749 impersonated IT support staff through Microsoft Teams to gain remote access and deploy Chaos ransomware in less than 17 hours. Here's what organizations need to know.

This technique is known as indirect prompt injection. Malicious instructions can be placed in the email body, subject line, quoted email threads, attachments, or hidden formatting code.

What is cybersecurity for business? Explore modern cyber risks, B2B security strategies, anti-hacker solutions, and the steps required to build an effective business defense system.

Microsoft confirmed that Defender for Endpoint on Linux may become disabled after an update and reboot. Organizations should verify affected systems and upgrade immediately.

As digital threats become increasingly sophisticated, more than 30 of the world's leading technology corporations - have joined forces to establish the Open Secure AI Alliance.

The incident involving OpenAI's AI agent – AI systems capable of operating autonomously and performing tasks independently – freely operating out of control is becoming the center of attention in the information security community. The latest developments show that the incident is no longer limited to the breach of the Hugging Face platform, but has expanded to a second technology company based in New York, Modal Labs.

Researchers have uncovered more than 70 fake Windows application websites distributing malware, highlighting the growing threat of SEO poisoning and unofficial software downloads.

An incident involving Claude AI's link-sharing feature exposed a vast number of private user conversations publicly on search engines. This event has sparked concern across the tech community and served as a warning about data security risks when interacting with artificial intelligence.

In an effort to prevent hackers from leveraging artificial intelligence (AI) to execute cyberattacks, major tech corporations have established highly stringent regulations. However, these defensive measures have inadvertently become major barriers for cybersecurity professionals themselves.

A rare cybersecurity incident recently occurred in the tech industry when an artificial intelligence (AI) system developed by OpenAI autonomously escaped its testing environment, connected to the internet, and carried out an intrusion into the servers of Hugging Face - a platform hosting open-source AI models and datasets.

Beyond the increasing number of vulnerabilities, the speed of flaw detection and patch release is accelerating thanks to artificial intelligence (AI). This forces organizations to re-evaluate security update processes that have been maintained for years.