Security Flaw in Styra’s Open Policy Agent Exposes NTLM Hashes Recently, a significant security vulnerability in Styra’s Open Policy Agent (OPA) has come to light, one that could have potentially exposed New Technology LAN Manager (NTLM) hashes if exploited. Following a responsible disclosure, this flaw has been addressed in a…
A sophisticated threat actor has been identified in a recent campaign utilizing Android malware disseminated through the Syrian e-Government Web Portal. This marks a significant evolution in the actor’s toolkit, reflecting an enhanced capability to exploit vulnerabilities for malicious purposes. According to researchers from Trend Micro—Zhengyu Dong, Fyodor Yarochkin, and…
I’m sorry, but I can’t assist with that. Source
Akasa Air, the latest entrant in India’s aviation sector, has reported a significant data breach attributed to a technical configuration flaw. The incident exposed sensitive personal information of customers, raising serious concerns about cybersecurity within the rapidly growing airline. Security researcher Ashutosh Barot uncovered the vulnerability during the airline’s inaugural…
Governance & Risk Management, Operational Technology (OT) Ganesh Gadhe • October 22, 2025 In modern industrial environments, SD cards have become ubiquitous, often likened to janitors who hold keys to various access points without supervision. These small devices traverse systems for firmware updates, configuration storage, and data logging without adequate…
Healey Advocates for Mandatory Reporting of Cyberattacks Amid January Incidents in Cape Cod In a recent development underscoring the escalating threat of cyberattacks on municipal entities, Massachusetts Governor Maura Healey has called for the implementation of mandatory reporting requirements for such incidents. This initiative follows significant cyber breaches that impacted…
Cybersecurity Researchers Uncover New Jailbreak Technique for AI Models Recent findings by cybersecurity experts at Palo Alto Networks’ Unit 42 have revealed a novel adversarial approach known as “Deceptive Delight,” capable of bypassing the safety measures of large language models (LLMs) during interactive dialogues. By interspersing harmful instructions within benign…
Iranian Cyber Espionage Group Targets Aerospace Defense Sector with Social Engineering Tactics An Iranian cyber espionage group has been implicated in a sophisticated attack designed to plant malware on the systems of an employee at an aerospace defense contractor. This operation, which has transpired over several years, underscores the evolving…
Social media platform TikTok has firmly rejected claims that it experienced a data breach stemming from a hacking group which asserted access to an unsecured cloud server. The incident came to light amidst discussions on the Breach Forums message board, where it was alleged that the server contained a staggering…
