Cyber ​​Security Hub

ClickLock uses a fake Cloudflare verification page, locks macOS applications, and forces victims to enter passwords to steal data, crypto wallets, and accounts.

WP2Shell combines two WordPress Core flaws that enable unauthenticated attacks. Businesses should patch, investigate compromise, and monitor websites.

Arctic Wolf identified 292 fake GitHub repositories distributing BoryptGrab, targeting browser data, cryptocurrency wallets, and tokens on Windows.

A recent report from cybersecurity organization Mindgard has highlighted a dangerous vulnerability in the Windows version of Cursor application, allowing malicious actors to execute code directly on developers' machines.

A new study proposes expanding AI pentesting to cover prompts, retrieved data, memory, sensors, and tools that may influence operational behavior.

Recently, Microsoft marked a significant milestone by releasing an unprecedented number of security patches for familiar products like Windows and Office.

Some vulnerabilities are believed to have remained undetected for 15 to 16 years before being discovered. This raises significant concerns for businesses that rely on open-source infrastructure, virtualization systems, and software components that have been used reliably for long periods.

Apple has sued OpenAI and two former employees over alleged theft of hardware trade secrets. The case highlights insider risk and data controls.

Sygnia observed an AI-assisted intrusion spread from an internet-facing application to AWS, CI/CD systems, and sensitive data within 72 hours.

Vietnam will enforce stricter regulations on 46 high-risk AI systems across six sectors starting August 15th, 2026. Learn what businesses need to know to stay compliant.

The cybersecurity community recently witnessed a remarkable turning point as artificial intelligence (AI) executed a cyberattack entirely on its own.

ERP AI can accelerate software development, but it cannot replace a proven ERP platform. Learn the risks and best practices for securing enterprise systems with IPSIP Vietnam.

As artificial intelligence (AI) tools become indispensable in daily workflows, threat actors have devised a highly sophisticated new attack vector.

The rapid evolution of Artificial Intelligence (AI) is completely reshaping the cybersecurity landscape, bringing both unprecedented opportunities and challenges.

Instead of planting malware directly, the attacker cleverly inserts hidden instructions to trick autonomous AI assistants like Claude Code into automatically triggering remote destructive commands. This vulnerability is the clearest evidence of the dangers of Shadow AI.

Nissan has confirmed that current and former employee data may have been accessed after attackers exploited the Oracle PeopleSoft zero-day vulnerability, CVE-2026-35273. According to Oracle, the campaign affected hundreds of companies, while Mandiant said it notified more than 100 organizations impacted by the attacks.

Security researchers from Mozilla's Zero Day Investigative Network (0DIN) have uncovered a sophisticated attack technique that targets AI coding agents through seemingly clean GitHub repositories.

Curl 8.21.0 addresses a record-breaking 18 security vulnerabilities (CVEs), the highest number ever fixed in a single Curl release. Among them is CVE-2026-8932, a flaw that originated in 2001 and remained undiscovered for more than 25 years before finally being patched.

In June 2026, security researchers identified a verification flaw on ClawHub that enabled 15 unauthorized accounts to publish 23 deceptive plugins using official OpenClaw namespaces.

Artificial Intelligence (AI) is being weaponized by malicious actors to orchestrate increasingly sophisticated technological traps.