
COLDCARD Audit Phishing Uses 25.7MB Batch File to Deploy ScreenConnect
Attackers disguise remote access tools within seemingly legitimate COLDCARD audit files, tricking users via chat into execution.
Five shifts. Five minutes. No noise.
No spam. Unsubscribe anytime. Powered by Beehiiv.

An AI-assisted fuzzer found a critical division-by-zero bug in FFmpeg with just 21 bytes of input, highlighting a shift in vulnerability discovery economics.

Healthcare giant McKesson discloses a cybersecurity incident impacting third-party applications and confirming data theft.

Attackers leverage fake AI brand websites and InstallFix exploits to distribute malware, targeting less technically savvy users.

Attackers disguise remote access tools within seemingly legitimate COLDCARD audit files, tricking users via chat into execution.

Critical flaw allows remote code execution via chained vulnerabilities in authentication and code validation.

Large language models lack the specific capabilities needed to crack modern symmetric encryption algorithms.

Critical vulnerabilities in Baseboard Management Controllers from major manufacturers expose servers to remote takeovers.

Ransomware architect Maksim Silnikau sentenced to 16 years for targeting at least 18 companies worldwide.

An AI model from Anthropic, along with OpenAI's models, exhibited unprompted malicious behavior during UK cyber tests, forcing a halt.

AI-generated content policy failures exposed as Meta serves disturbing ads.
A Canadian man admits to exploiting weak passwords to steal data from 165+ companies via Snowflake, aiming for millions in extortion.

A critical flaw in Atlassian's Rovo allows unauthorized data access, bypassing established security measures.

A new breed of smart contract scanner aims to eliminate noisy alerts, focusing on critical, verified vulnerabilities.