Author: nitya

Cybersecurity researchers have uncovered a new class of CI/CD security weaknesses called “Cordyceps” that could allow attackers to hijack software development workflows and launch large-scale supply-chain attacks. The flaws were discovered in GitHub Actions environments and were found to affect more than 300 public repositories, including projects linked to major technology organizations. The issue highlights … Continued

Cybersecurity researchers have uncovered a new connection between the stealthy Mistic backdoor and KongTuke, a well-known initial access broker active in the cybercrime ecosystem. Investigators say the activity highlights how threat actors continue to work together, with one group focusing on gaining access to systems and another using that access for follow-on attacks. The discovery … Continued

The U.S. Department of Justice (DoJ) has seized a cloud computing account linked to the Cambodia-based Huione Group, a company that authorities say played a major role in moving and hiding money earned through cyber scams. According to investigators, the account was used as critical infrastructure that helped criminals transfer and conceal billions of dollars … Continued

Cisco has released security updates for a critical vulnerability affecting its Unified Communications Manager (Unified CM) platform. The flaw, tracked as CVE-2026-20230, can allow a remote attacker to gain root-level privileges on affected systems. Security researchers and Cisco have confirmed that proof-of-concept (PoC) exploit code is publicly available, increasing the urgency for organizations to apply … Continued

UK lawmakers have raised concerns that many museums and galleries across the country are still vulnerable to cyberattacks and security breaches. A recent parliamentary report said valuable collections and sensitive information could be at risk if stronger digital protections are not put in place. The warning comes as cultural institutions continue to rely heavily on … Continued

The excitement around Grand Theft Auto VI (GTA 6) has reached a new level after Rockstar Games confirmed that pre-orders will open on June 25, 2026. However, cybersecurity experts and gaming communities are warning that scammers are already taking advantage of the hype. Fake pre-order websites, fraudulent beta invitations, and phishing campaigns have started appearing … Continued

Two young members linked to the notorious Scattered Spider cybercrime group have admitted their role in the major cyber-attack that targeted Transport for London (TfL) in 2024. The case has drawn significant attention because the attack disrupted services used by millions of passengers and caused financial losses estimated at around £39 million. Authorities described the … Continued

As the 2026 FIFA World Cup captures global attention, cybersecurity experts are warning that major sporting events can create unexpected security risks inside organizations. Researchers analyzing billions of compromised passwords found that many users choose passwords based on favorite football players, teams, tournaments, and trending sports topics. While these passwords may appear unique, they often … Continued

Cybersecurity researchers have uncovered a new malware campaign in which attackers uploaded malicious npm packages disguised as legitimate PostCSS-related development tools. PostCSS is widely used by web developers for processing CSS, making it a trusted part of many software projects. By pretending to be useful development packages, the attackers attempted to trick developers into installing … Continued

Cybersecurity researchers have discovered an active malware campaign that uses WhatsApp messages to spread malicious VBScript files. According to findings from Kaspersky, the attackers are targeting users of both WhatsApp Desktop and WhatsApp Web. Victims have been identified in several countries, including India, Malaysia, Brazil, Mexico, Singapore, the United Kingdom, Spain, Taiwan, Australia, Russia, and … Continued