A newly emerging threat landscape has been highlighted as a suspected Russian-speaking cyber actor has reportedly utilized artificial intelligence (AI) to exploit vulnerabilities in PaperCut NG/MF, a widely used print management solution. This exploitation has compromised hundreds of instances of the software, predominantly affecting organizations within the education sector across…
PaperCut Issues Security Update Amid Exploitation of Critical Vulnerabilities On Thursday, PaperCut released a significant security maintenance update to address two critical vulnerabilities that have recently been exploited in the wild. This update replaces all previous emergency patches aimed at mitigating these issues, underscoring the urgency of the situation. The…
Active Cyberattack Campaign Targets PaperCut Software Cybersecurity researchers from Blackpoint Cyber and GreyNoise have uncovered an active cyberattack campaign targeting users of PaperCut NG and PaperCut MF, self-hosted print management solutions commonly utilized for printing and scanning services. The attackers are exploiting vulnerabilities associated with the Application Servers of these…
In recent developments within the cybersecurity landscape, practitioners have observed a significant evolution in the types of malware deployed by attackers, particularly with the integration of artificial intelligence (AI) components. Researchers from Cisco Talos have introduced a new open-source framework, named the Cognitive Artifact Intelligence Research Network (CAIRN), aimed at…
Cybercriminals Exploit Fake AI Tools in Targeted Attack on JetBrains Marketplace Cybercriminals have launched a coordinated supply chain attack targeting software developers through the JetBrains Marketplace, utilizing counterfeit artificial intelligence (AI) tools. This breach was uncovered by Aikido Security, a firm specializing in code security, which identified 15 fraudulent plugins…
As the software industry has evolved over recent decades to enhance product security, the rapid adoption of artificial intelligence (AI) threatens to undermine these advancements. Companies are rapidly implementing self-hosted large language model (LLM) infrastructures, driven by the potential of AI as a transformative tool and the urgency to increase…
In January 2025, cybersecurity experts from Wiz Research uncovered a significant data leak at Chinese AI firm DeepSeek, which compromised over 1 million sensitive log streams. The researchers discovered a publicly accessible ClickHouse database associated with DeepSeek, granting potential full control over database operations and allowing access to internal data. This incident included more than a million lines of log streams containing chat histories, secret keys, and more. Wiz promptly notified DeepSeek, which took immediate action to secure the vulnerability. However, this event highlights the persistent risk of data leakage. Whether intentional or accidental, data leakage encompasses various scenarios, as defined by IBM, which describes it as the unintentional exposure of sensitive information to unauthorized parties. On the intentional side…
Identifying Data Leaks Before They Escalate In early January 2025, cybersecurity firm Wiz Research unveiled that DeepSeek, a Chinese AI company, faced a serious data leak exposing over one million sensitive log entries. The Wiz team discovered a publicly accessible ClickHouse database owned by DeepSeek, which compromised the organization’s operations…
In January 2025, cybersecurity experts from Wiz Research uncovered a significant data leak at Chinese AI firm DeepSeek, which compromised over 1 million sensitive log streams. The researchers discovered a publicly accessible ClickHouse database associated with DeepSeek, granting potential full control over database operations and allowing access to internal data. This incident included more than a million lines of log streams containing chat histories, secret keys, and more. Wiz promptly notified DeepSeek, which took immediate action to secure the vulnerability. However, this event highlights the persistent risk of data leakage. Whether intentional or accidental, data leakage encompasses various scenarios, as defined by IBM, which describes it as the unintentional exposure of sensitive information to unauthorized parties. On the intentional side…
The past week underscored a critical evolution in cyber threats, illustrating that attackers no longer require large-scale hacks to unleash significant damage. Instead, they are targeting essential tools that organizations rely on, including firewalls, browser extensions, and even smart devices. These seemingly minor vulnerabilities can become gateways to severe breaches.…
Agentic AI, Artificial Intelligence & Machine Learning, Next-Generation Technologies & Secure Development Agentic AI Firms Accused of Conducting Large-Scale Data Theft Using Fake Accounts Rashmi Ramesh (rashmiramesh_) • February 24, 2026 Allegations point to extensive operations by China-based MiniMax that conducted more than 13 million data exchanges targeting agentic capabilities.…
