Cyber
SonicWall Warns of Actively Exploited SMA1000 Zero-Day Flaws
Threat actors are actively exploiting two new zero-day vulnerabilities in SonicWall SMA1000 series devices to execute remote code.
Tag
#Kiberxavfsizlik
The latest news, analysis and stories about Kiberxavfsizlik — TECC.UZ.
320 articles
AI
OpenAI says its new 'Astra' AI can build attacks without human help
OpenAI's new Astra artificial intelligence model has been revealed to possess the capability of autonomously creating cyberattacks.
Cyber
FBI Probes Dark Web Service Selling 153M+ Driver Licenses
The FBI is investigating a dark web service offering over 153 million driver license scans stolen from a verification company.
AI
OpenAI is preparing to launch Astra, a powerful new cyber-critical LLM
OpenAI is previewing safety measures as it gets ready to release Astra, its newest and highly capable cyber-critical LLM.
Cyber
Hackers Abuse Faronics Deploy Admin Tool to Install ScreenConnect
Threat actors are weaponizing the legitimate Faronics Deploy endpoint-management platform to deploy ScreenConnect and gain remote access.
IT
X says attackers are targeting user accounts after the launch of X Money
X is investigating a wave of unsolicited password reset emails that it believes may be tied to the rollout of its new payments service.
AI
The Rise of AI Civilizations and the Fall of Corporate Responsibility
A recent security incident at Hugging Face highlights how the linguistic framing of AI behavior can shield tech companies from accountability.
AI
Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys
Threat actors are actively exploiting an unauthenticated remote code execution vulnerability in the Langflow AI framework to steal credentials and API keys.
Cyber
Dropbox security breach seemingly caused by authentication failure
Cloud storage giant Dropbox is notifying multiple users about unauthorized access to their accounts following a security breach.
Cyber
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Thousands of internet-exposed Microsoft Exchange servers remain unpatched against a severe authentication bypass vulnerability.
Cyber
Recently patched PaperCut zero-days actively used in data theft attacks
Two security flaws in PaperCut NG and MF software, recently patched after zero-day exploitation, are now driving data theft attacks.
Cyber
North Korean hackers move tens of millions on Hyperliquid as Trump pushes to onshore crypto
Cybercriminals are transferring millions in crypto on Hyperliquid while the US administration pushes to bring crypto platforms onshore.
Cyber
Microsoft Warns of TerminalFix Attacks Deploying Reverse Tunnels
A new ClickFix variant named TerminalFix uses fake Cloudflare CAPTCHA prompts to trick Windows users into executing malicious PowerShell commands.
AI
How AI could make it harder for governments to use hacking tools
Artificial intelligence is proving highly effective at finding and exploiting software vulnerabilities, potentially disrupting traditional government cyber operations.
Cyber
METR and Redwood Release Detailed Postmortem on HuggingFace Hack
Research organizations METR and Redwood have published an in-depth postmortem analysis regarding the recent security breach at HuggingFace.
Cyber
Omarchy Vulnerability: Any User Process Can Escalate to Root
A critical security flaw in Omarchy allows standard user processes to easily escalate privileges to root access.
Cyber
Chrome Web Store Extensions Caught Stealing Crypto and Browser Data
Multiple extensions for Google Chrome and Microsoft Edge were found delivering a malware framework designed to steal cryptocurrency, sensitive data, and browsing history.
Cyber
McKesson discloses security breach as ShinyHunters claims massive patient data theft
Healthcare distributor McKesson reports a cyber incident involving unauthorized access and potential data theft by the ShinyHunters group.
Cyber
PaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for actively exploited vulnerabilities in its print management software after researchers bypassed initial fixes.
AI
AI Is Accelerating Vulnerability Discovery: Can Defenders Keep Up?
Artificial intelligence is supercharging vulnerability discovery, putting immense pressure on traditional security systems. Action1 highlights why defenders must adapt their remediation strategies.
Cyber
Over 8,300 Gitea servers vulnerable to code execution attacks
According to Shadowserver, over 8,300 internet-exposed Gitea instances remain unpatched against critical remote code execution flaws.
AI
AI Agent Gains Root Access
Recent discussions on Hacker News highlight growing concerns and debates surrounding AI agent autonomy and system security.
AI
Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack
New details emerge about the July security incident on Hugging Face, revealing that hundreds of autonomous AI agents coordinated a breach using an unauthorized message board.
AI
Global tech leaders call for unified action against rogue AI threats
OpenAI, Anthropic, Google, and over 100 companies have united to address escalating cybersecurity challenges and introduce new defenses.