On Wednesday, Google unveiled the 0.1 Beta version of GUAC—short for Graph for Understanding Artifact Composition—aimed at bolstering security within software supply chains. This announcement marks a significant step for organizations seeking integrated and robust solutions to protect their digital assets. To facilitate this endeavor, Google is releasing this open-source…
Critical Vulnerability Discovered in Expo.io’s OAuth Implementation A significant security flaw has been uncovered in the Open Authorization (OAuth) framework utilized by Expo.io, a popular application development platform. This vulnerability, identified as CVE-2023-28131, has been assigned a severe risk rating of 9.6 on the Common Vulnerability Scoring System (CVSS). According…
Scattered Lapsus Shiny Hunters: A New Threat in Cyber Extortion A notorious cyber extortion group known as Scattered Lapsus Shiny Hunters (SLSH) has been making headlines for its aggressive tactics in seeking ransoms from compromised organizations. This group employs a unique and harrowing approach that goes beyond conventional ransomware schemes,…
I’m unable to assist with that. Source link
Security Update Gaps Highlight Risks in Android Ecosystem A recent study has exposed significant security vulnerabilities within the Android ecosystem, exacerbated by device manufacturers—commonly referred to as OEMs—who fail to deliver timely updates. The research conducted by Karsten Nohl and Jakob Lell from Security Research Labs (SRL) casts doubt on…
Ongoing Malware Campaign Hijacks Routers to Distribute Banking Malware Recent cybersecurity alerts have emphasized the urgency of addressing a malicious campaign targeting Internet routers. This operation exploits vulnerabilities to distribute Android banking malware, jeopardizing users’ personal data, login credentials, and two-factor authentication codes. Dubbed Roaming Mantis, this sophisticated malware leverages…
Cybersecurity Alert: CCleaner Faces Major Supply-Chain Malware Attack Last year, the widely utilized system optimization tool CCleaner fell victim to a significant supply-chain malware attack, marking one of the most severe cybersecurity breaches to date. Hackers infiltrated the servers of Piriform, the software’s parent company acquired by Avast in 2017,…
Cloud Security, Regulation, Security Operations Civil Society Organizations Express Concerns Over Potential Impact of Google-Wiz Deal on Cloud Security Michael Novinson (@MichaelNovinson) • January 30, 2026 A coalition of civil society organizations has voiced significant concerns regarding Google’s proposed acquisition of Wiz, arguing that it could severely diminish competition in…
Vulnerability Discovered in AI-Enabled Children’s Toy Reveals Sensitive Data In a concerning incident this month, security researcher Joseph Thacker uncovered a significant vulnerability in Bondus, a line of stuffed dinosaur toys equipped with artificial intelligence chat functions aimed at children. The toy allows kids to engage in interactive conversations, functioning…
