Hackers Cross From IT to OT Through a Private APN in Poland
Attackers breached a Polish CHP plant through a Fortinet device and private APN, reaching PLCs and disrupting turbine and water treatment systems.
general
20 articles
Attack Surface Management - Matt Lea - CSP #227
Four AI agent governance mistakes to avoid
Most teams are just starting to reckon with the impact of AI agents on the enterprise – here’s how to get started.
Poland uncovers second heat plant cyberattack that went hidden for months
The incident occurred on the same day as coordinated cyberattacks struck more than 30 other renewable energy installations and a larger heat plant, as Poland...
Senate Democrats introduce bill to distribute $300 million annually to shore up water system cybersecurity
Two Democratic senators introduced legislation that would allocate $300 million each year to fund cybersecurity improvements for the water and wastewater sec...
Researchers Uncover RovoBlast Vulnerability in Atlassian AI Assistant
Atlassian fixed a flaw letting one crafted link make its Rovo AI assistant exfiltrate company data
Russian military hackers pose as recruiters to target Ukrainian IT workers
Ukraine’s computer emergency response team, CERT-UA, said Saturday that the campaign has been running since at least May and is linked to Sandworm, the notor...
UK man tied to The Com sentenced for abusing 117 victims
Justin Swaddle, who was a minor when he committed the crimes, coerced children across multiple countries into self-harm and sexual abuse using threats tied t...
Talk to the LLM: How AI exposes 'pig butchering' scams
A security researcher is using AI to study and expose long-duration scams that abuse online trust.
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
A lot of security problems still begin with someone doing a completely normal thing. Cloning a repo.
Ransomware attacks increasingly target managers, not just CEOs
Ransomware campaigns are becoming more sophisticated, moving away from broad attacks to highly targeted extortion.
Cyberattack on Steam hardware shipper leaks names, addresses, and order data
Video game publisher Valve is alerting customers in Europe to a data breach at CEVA Logistics, its Steam hardware shipping partner. Reports from affected cus...
CISA: SonicWall SMA1000 flaws now exploited by ransomware gangs
CISA has confirmed that ransomware gangs have begun exploiting two recently patched SonicWall SMA1000 vulnerabilities, including a maximum-severity server-si...
Cybersecurity firm's election system findings halted amid political pressure
Mojave Research's examination of Dominion voting systems in Puerto Rico revealed at least a dozen high- or critical-severity software vulnerabilities.
OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
Hacktivist group Head Mare exploits TrueConf vulnerabilities to deliver backdoors
The attackers leverage vulnerabilities, tracked as KLCERT-26-057 and KLCERT-26-058, to execute arbitrary code and gain elevated privileges on the server, acc...
WordPress Plugins Compromised Without a Single File Change
Poisoned JSON feed let attackers backdoor WordPress sites without changing any plugin files
Nearly 800 malicious npm packages deliver cross-platform malware
The campaign, tracked as Flooding Dropper by Sonatype, employs a novel approach by instructing developers to load packages using "require()", bypassing typic...
OpenAI's new Astra model may pose critical cybersecurity risks
Why transparent AI agents matter more than you think
The difference between a prompt injection attack you'll catch and one you won't might just be whether your AI agent can explain itself. The post Why transpar...