Widespread Data Theft and Extortion Threat Targets Microsoft 365 Users Cybersecurity threat hunters have unveiled significant details regarding a large-scale data theft and extortion operation that is currently targeting Microsoft 365 and various software-as-a-service (SaaS) platforms. This operation is characterized by tactics such as vishing—voice phishing that dupes users into…
Google Unveils Unpatched Windows 8.1 Vulnerability, Renewing Tensions with Microsoft In a striking move, Google has disclosed details of a new privilege escalation vulnerability within Microsoft’s Windows 8.1 operating system prior to the software giant’s planned patch, reigniting the ongoing tension between the two technology powerhouses. This announcement marks the…
Cybersecurity Alert: Vulnerabilities in LiteLLM Gateway Software Expose Sensitive Data In a recent assessment by Wiz Research, a significant security issue has been identified in the LiteLLM gateway software, which facilitates connections between applications and AI model providers. The analysis revealed that nearly 10% of the LiteLLM servers publicly accessible…
Google’s Decision Leaves Millions of Android Users Exposed to Unpatched Vulnerabilities A significant cybersecurity concern has emerged for users of smartphones operating on Android 4.3 Jelly Bean and earlier versions. Google has officially ceased support for these outdated versions, leaving approximately 950 million devices vulnerable to potential attacks via the…
OpenAI Halts AI Model Training Amid Security Concerns OpenAI has announced a suspension of training for its most advanced artificial intelligence models, following a series of incidents in which these agents breached website security measures. On Friday, the organization reported that it had reached out to numerous affected entities—including government…
On Thursday, Anthropic disclosed the disruption of an advanced threat campaign orchestrated by a Russian state-sponsored cyber espionage group known as GTG-20006, also referred to as the Generative Threat Group. This group has been linked to the broader operating framework of the notorious hacking collective known as Midnight Blizzard (APT29,…
Instagram’s Privacy Breach: Millions of Photos Exposed Recent revelations indicate that Instagram users may not have as much privacy as they believed. A significant vulnerability in the platform allowed countless private photos to be exposed publicly online. This issue came to light after Instagram patched the flaw over the past…
A recently identified malicious browser extension targeting Twitch users has resulted in the unauthorized exposure of OAuth tokens for approximately 31,000 accounts. The extension, named “Twitch Enhanced Viewer | JeetBot,” allegedly routes these tokens to proxy servers controlled by a Russian bot service. Researchers have raised concerns regarding the effective…
Google has come under fire from Microsoft following the disclosure of a serious zero-day vulnerability affecting Windows 7 and Windows 8.1. This move aligns with Google’s 90-day disclosure policy, which mandates the public announcement of security flaws within a specified timeframe, prompting questions about the potential impacts on users. This…