AI
Coldcard ships firmware after $114 million bitcoin theft, says AI helped catch more bugs
Hardware wallet maker Coldcard is shipping new firmware in the wake of a massive security breach, leveraging AI to enhance code safety.
Tag
#Kiberxavfsizlik
The latest news, analysis and stories about Kiberxavfsizlik — TECC.UZ.
320 articles
Cyber
Microsoft warns of max severity Entra ID flaw exploited in attacks
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management platform.
Cyber
Hackers Poison Rust Crate arrayref to Push Infostealer Malware
Attackers compromised the maintainer account of the popular Rust arrayref crate, injecting malware that executes on developers' systems during compilation.
Cyber
How to compromise your system with a job interview
Recent security insights highlight a growing trend where cybercriminals target tech professionals through fake job interviews and malicious test tasks.
Cyber
How MSPs can catch advanced phishing attacks missed by email filters
Kaseya outlines how managed service providers can detect and contain sophisticated AI-driven phishing threats that bypass traditional inboxes.
Cyber
US says hackers are targeting vulnerable water systems with the help of AI
Hackers are targeting internet-connected Siemens controllers used in water facilities around the United States.
Tech
Roblox still allows predators to contact children, regulator says
Despite claiming to have improved safety features, Roblox has been criticized by a regulatory authority for failing to adequately protect children from online predators.
Cyber
Citrix urges admins to patch new NetScaler flaws immediately
Citrix has warned customers to swiftly secure their systems against two vulnerabilities impacting NetScaler products.
Cyber
New Manic Android malware can exfiltrate data through nearby devices
A new Android malware named Manic targeting users in multiple European countries has a fallback data exfiltration mechanism that uses nearby infected devices.
Cyber
Critical Zimbra RCE Flaw Actively Exploited in Recent Attacks
CERT Polska has issued a warning as attackers begin actively exploiting a critical remote code execution vulnerability in the Zimbra Collaboration Suite.
Cyber
Sakura Internet Hack Exposes Data of Up to 1.36 Million Accounts
Japanese cloud and data center provider Sakura Internet disclosed a cyberattack that compromised its sales management system containing customer contract and membership data.
Cyber
Rogue ransomware affiliate poses as data recovery firm to scam victims
A suspected ransomware affiliate is pretending to be a data recovery service called "Ransom Busters" to extract payments from victims.
AI
Researchers complain that OpenAI revoked their access to limited cyber program
Multiple cybersecurity researchers reported they suddenly lost access to OpenAI's Trusted Access for Cyber (TAC) program, which provides models with fewer guardrails for vetted users.
AI
US warns of AI-powered attacks on Siemens PLCs in critical infrastructure
U.S. cybersecurity agencies warn that threat actors are using AI-generated scripts to exploit Siemens S7 Series programmable logic controllers.
AI
ClarityCheck people-finder left millions of face photos exposed
A controversial facial-identification tool exposed millions of face photos online, with most victims unaware their data was being used.
Cyber
Password Spraying Attacks Surge 155x Amid MFA Gaps
Huntress observed a massive 155x increase in password spraying attacks driven by legacy auth and MFA vulnerabilities.
Cyber
Critical RCE flaw in Windows IKE Extension now actively exploited
CISA has warned that hackers are actively exploiting a critical remote code execution flaw in the Windows Internet Key Exchange service.
IT
Windows 11 24H2 Home and Pro Reach End of Support in Two Months
Microsoft has reminded users that systems running Home and Pro editions of Windows 11 24H2 will soon stop receiving updates.
Cyber
CISA: Medusa Ransomware Hits Over 500 Critical Infrastructure Organizations
The FBI and CISA report that the Medusa ransomware gang has breached more than 500 critical infrastructure organizations in the US since June 2021.
Cyber
Privacy-focused client-side password generator introduced on Hacker News
A new privacy-first client-side password generator has been shared on Hacker News, emphasizing local data processing and enhanced security.
Cyber
Bluesky suffers recent outage due to another DDoS attack
The social networking site Bluesky was hit by another large-scale DDoS attack this year, causing temporary service disruptions.
Cyber
Your Controls Block Known Attacks. What About the Behavior?
Picus Security's Blue Report 2026 highlights how prevention rates vary by technique and why behavioral testing is essential to uncover hidden security gaps.
Cyber
CISA: Windows Task Host flaw now exploited by ransomware gangs
The U.S. CISA confirms that ransomware gangs are actively exploiting a high-severity Windows Task Host vulnerability.
Cyber
Microsoft starts removing WMIC tool used by cybercriminals
Microsoft has officially begun removing the legacy WMIC command-line tool starting with Windows 11 version 24H2 and recent beta builds.