Tag Google

AMD SEV-SNP Flaw Enables Malicious Microcode Injection via Admin Access

A significant security vulnerability has been uncovered in AMD’s Secure Encrypted Virtualization (SEV) technology, which potentially enables an attacker to load malicious CPU microcode under certain circumstances. This flaw, designated as CVE-2024-56161, has been assessed with a CVSS score of 7.2 out of 10.0, classifying it as a high-severity issue.…

Read MoreAMD SEV-SNP Flaw Enables Malicious Microcode Injection via Admin Access

Google’s New AI Ransomware Defense: Effective, but Limited

Ransomware attacks have increasingly become a pressing digital threat as their sophistication grows, extending beyond traditional data-encrypting malware to include data grab-and-leak tactics. While the conventional form of ransomware that encrypts data and demands a ransom remains prevalent, Google has recently introduced a new defense mechanism for its Drive for…

Read MoreGoogle’s New AI Ransomware Defense: Effective, but Limited

Researchers Warn: Tech-Savvy Stalkers Can Exploit Tile Tracking Tags

Concerns Emerge Over Privacy Risks Linked to Tile Trackers Tile trackers, employed by over 88 million users globally to locate items such as keys and pets, are facing scrutiny following revelations by researchers from the Georgia Institute of Technology. According to a study, design vulnerabilities within Tile’s tracking technology may…

Read MoreResearchers Warn: Tech-Savvy Stalkers Can Exploit Tile Tracking Tags

Researchers Caution Against Privilege Escalation Threats in Google’s Vertex AI ML Platform

Recent cybersecurity findings have revealed two significant vulnerabilities within Google’s Vertex AI machine learning platform. These exploits could be leveraged by malicious entities to escalate user privileges and exfiltrate sensitive models directly from the cloud environment. According to an analysis released by researchers from Palo Alto Networks Unit 42, exploiting…

Read MoreResearchers Caution Against Privilege Escalation Threats in Google’s Vertex AI ML Platform

Chinese Spy Tool Found Within US Systems

Cyberwarfare / Nation-State Attacks, Fraud Management & Cybercrime Researchers Uncover Covert Chinese Access to US Service Provider Infrastructure Chris Riotta (@chrisriotta) • September 24, 2025 Image: Visut Chaivithooanukul/Shutterstock In a significant cybersecurity revelation, researchers have elucidated a long-running Chinese-linked cyberespionage campaign that infiltrated U.S. infrastructure and various enterprise service providers…

Read MoreChinese Spy Tool Found Within US Systems

Cisco Acknowledges Breach by Yanluowang Ransomware Group

Cisco Confirms Cyberattack Linked to Yanluowang Ransomware Gang On May 24, 2022, Cisco Systems, a leading networking equipment provider, confirmed it fell victim to a cyberattack that exploited vulnerabilities in its digital infrastructure. The breach occurred after an attacker compromised a Cisco employee’s personal Google account, which contained synchronized passwords…

Read MoreCisco Acknowledges Breach by Yanluowang Ransomware Group

Stellantis Confirms Data Breach Impacting Customer Information

Data Breach at Stellantis Exposes Customer Information Stellantis, a prominent multinational automaker with brands like Chrysler, Jeep, and Fiat, has reported a data breach that implicates customer information following unauthorized access to a third-party service provider. This incident raises significant concerns regarding data security practices within the automotive industry and…

Read MoreStellantis Confirms Data Breach Impacting Customer Information

Hackers Exploit Vulnerability in Krpano Framework to Inject Spam Ads on Over 350 Websites

A significant security vulnerability, identified as a cross-site scripting (XSS) flaw, has been exploited in a widely-used virtual tour framework, allowing cybercriminals to inject harmful scripts into hundreds of websites. This malicious activity aims to manipulate search results and promote spam advertising on a large scale. According to a report…

Read MoreHackers Exploit Vulnerability in Krpano Framework to Inject Spam Ads on Over 350 Websites