OpenAI has expanded its Daybreak cybersecurity initiative with a stronger version of GPT-5.5-Cyber, aiming to help security teams not only find software vulnerabilities but also fix them faster. The company says the cybersecurity industry has become very good at discovering flaws, but organizations still struggle to patch them quickly. Daybreak is designed to close that … Continued
A recent security incident involving Klue, a competitive intelligence platform used by many organizations, has raised serious concerns across the cybersecurity industry. The breach allowed attackers to gain unauthorized access to Klue’s integration infrastructure and steal OAuth tokens that customers used to connect their business applications. Security researchers say the attack eventually led to data … Continued
Cybercrime is growing rapidly across Asia-Pacific, and INTERPOL has warned that phishing attacks, ransomware campaigns, and AI-powered scams are becoming major threats across the region. According to its latest cyberthreat assessment, criminal groups are taking advantage of expanding digital services, new technologies, and increasing internet usage to target both organizations and individuals. The report found … Continued
Microsoft has linked the recent supply chain attack targeting the Mastra AI ecosystem to a North Korean threat group known as Sapphire Sleet. The attack affected the popular Mastra AI framework, which is widely used by developers to build AI agents, workflows, and automation tools. According to Microsoft, the attackers compromised the software supply chain … Continued
Canada’s intelligence agency, the Canadian Security Intelligence Service (CSIS), has revealed that it used a special court-approved warrant to remove malware from infected devices across the country. According to a newly released Federal Court ruling, this is the first time CSIS has used its threat reduction powers in this way. The operation targeted two botnets … Continued
Security researchers have discovered a newly identified malware family called AryStinger that is quietly infecting outdated internet routers around the world. According to researchers from QiAnXin XLab, more than 4,300 devices have already been compromised, and the number continues to grow. Unlike many router-based botnets that focus on launching DDoS attacks, AryStinger is designed to … Continued
Salesforce has disabled the connection between its platform and Klue Battlecards after a security incident involving the abuse of OAuth tokens. The company took the action as a precautionary measure after investigators discovered that attackers had used a compromised Klue integration to access customer data stored in Salesforce environments. Reports indicate that the issue was … Continued
Federal prosecutors have charged a New York man in a cyberstalking case that highlights the growing misuse of artificial intelligence for online harassment. Authorities say 21-year-old Anthony Belford carried out a months-long campaign targeting a college student in Georgia. The case has drawn attention because it involved both AI-generated nude images and fake online identities … Continued
Apple has released an important security update for Beats Studio Buds after fixing a vulnerability that could allow nearby attackers to misuse the earbuds’ microphone. The issue affected devices that were not yet paired and were actively searching for Bluetooth connections. According to Apple’s security advisory, an attacker within Bluetooth range could potentially listen through … Continued
A recent security incident involving Novo Nordisk has drawn attention to an often-overlooked cybersecurity problem inside modern software development environments. Reports indicate that a leaked GitHub access token exposed weaknesses in the company’s development pipeline and highlighted how sensitive credentials can become a major security risk when not properly managed. The incident has become an … Continued
