Cybersecurity News
-
Cisco Reports Vishing Incident Affecting Customer Data
A recent security incident at Cisco highlights the persistent threat of social engineering attacks. Cisco disclosed a vishing (voice phishing) attack targeting its employees. While the breach was limited in scope, it…
-
Security Advisory on Critical Vulnerability Chain in NVIDIA Triton Inference Server
Recent research by Wiz Security has identified a significant chain of vulnerabilities within NVIDIA’s Triton Inference Server, a widely used platform for deploying AI models at scale. When exploited in sequence, these…
-
Mozilla Issues Warning About Phishing Attacks Targeting Firefox Add-on Developers
The Mozilla Foundation, creators of the Firefox browser, has issued an important warning for developers and users about a new phishing campaign targeting Mozilla Add-ons (AMO) accounts. These fake emails that appear…
-
Critical Security Vulnerabilities Found in Dahua Hero Smart Cameras
Bitdefender has identified critical security vulnerabilities in the firmware of the Dahua Hero C1 (DH-H4C) smart camera series. These vulnerabilities, affecting the device’s ONVIF protocol and file upload handlers, could allow unauthenticated…
-
Pi-hole Reports Security Breach Exposing Donor Data
Pi-hole, a trusted and widely adopted open-source network security solution, experienced a security incident involving the inadvertent exposure of user information submitted through its donation page. The breach was limited to names…
-
Vulnerability In WordPress AI Engine Plugin Affects 100k+ Sites
WordPress sites using the AI Engine plugin should be aware of a recently discovered security vulnerability that could allow malicious actors to upload arbitrary files and potentially take control of affected websites.…
-
CISA Releases Thorium, a Security Platform for Automating File Analysis
The Cybersecurity and Infrastructure Security Agency (CISA), working alongside Sandia National Laboratories, has announced that Thorium is now available for public use. This platform is designed to help cybersecurity teams automate file…
-
Hidden Vulnerabilities in Browser-Based Generative AI Usage
Users and organizations are increasingly rely on generative AI (artificial intelligence) tools to streamline workflows, enhance productivity, and handle sensitive data. But new security threats are emerging, some of which could have…
-
New Choicejacking Attack Exploits Charging Stations to Steal Data from Phones
Public charging stations have always been considered a convenient way to power up devices on the go. However, recent cybersecurity research reveals a disturbing new threat—called Choicejacking—that turns these stations into data-stealing…