You’ve probably seen more than a few alarmist headlines about artificial intelligence: "AI refuses to shut down!" "AI blackmails employees!" "AI is driving people insane!" But how much of it is genuine concern—and how much is sensationalism fueled by people who don’
Proof-of-concept (PoC) exploits for a critical vulnerability in Citrix NetScaler ADC and NetScaler Gateway—dubbed Citrix Bleed 2—have been publicly released. Security researchers warn the flaw, tracked as CVE-2025-5777, is easily exploitable and can be used to steal user session tokens. The vulnerability has drawn comparisons to Citrix Bleed
Security researchers have uncovered a widespread browser extension campaign that silently harvested user data and redirected traffic—affecting over 2.3 million users across Chrome and Edge. Discovery by Koi Security Researchers from Koi Security have identified 11 malicious extensions in the official Chrome Web Store that were collectively downloaded
Australian airline Qantas has confirmed a major cybersecurity breach that exposed the personal data of more than six million customers. The attack—linked to a notorious cybercriminal group—marks one of the largest data compromises in the country’s aviation history. Key Details of the Breach The breach was first
With over 200,000 downloads and adoption by global institutions, Xe Iaso’s Anubis is quietly waging war on AI-powered web scrapers—without breaking the internet for everyone else. The Birth of Anubis In January 2025, developer Xe Iaso released Anubis, an open-source tool built to thwart AI scrapers. Since
A commercial red teaming tool is now in the hands of threat actors, raising concerns about tool leakage, responsible disclosure, and trust in the offensive security ecosystem. Hackers Exploit Shellter Elite Following Leak Shellter Project, the developer of Shellter Elite—a commercial payload loader built for evading antivirus and EDR
In the fast-moving world of software development, speed has long been the name of the game. But as anyone who's deployed code in the wild knows, speed without security is like driving a race car without brakes. That’s where DevSecOps comes in. DevSecOps—short for Development, Security,
Security researchers at Human Security have uncovered a massive ad fraud operation dubbed IconAds, involving 352 malicious Android apps previously available on the Google Play Store. At its peak, the campaign generated over 1.2 billion ad requests per day, primarily targeting users in Brazil, Mexico, and the United States.
Cybersecurity analysts at Netcraft have uncovered a troubling trend: AI chatbots frequently generate incorrect or misleading URLs when asked to provide official website links for major brands. According to researchers, this flaw opens a dangerous new vector for phishing and domain hijacking attacks. Key Findings from Netcraft’s Study The
A hacker is threatening to release 106 GB of data allegedly stolen from Spanish telecommunications giant Telefónica, though the company firmly denies any recent breach or data compromise. The threat actor, operating under the alias “Rey,” claims the intrusion occurred on May 30, during which over 12 hours of data
Cybersecurity researchers at Cofense report a dramatic rise in phishing campaigns leveraging .es domains, which are officially reserved for Spanish-language websites or entities based in Spain. The use of these domains by cybercriminals has surged 19-fold since the beginning of 2025, making .es the third most exploited top-level domain (TLD)
Two vulnerabilities have been discovered in the widely used sudo utility, enabling local attackers to escalate privileges to root on affected Linux systems. The flaws—identified by security researchers at Stratascale—include a newly discovered 12-year-old bug. One of the vulnerabilities (CVE-2025-32462) has existed in the sudo codebase since 2013,