“ShadowLeak” Prompt Attack on ChatGPT Lets Hackers Steal Emails Undetected
by : Jairo J. Rodriguez A new attack technique called “ShadowLeak” is putting a fresh spotlight on the risks of tying artificial intelligence tools directly to…
News
Threats, incidents and advisories
What is happening in cybersecurity, with a close eye on OT and critical infrastructure.
- All news
- OT/ICS
- Vulnerabilities
- Cybercrime
- Cybersecurity Trends and Emerging Threats
- Hacking Attacks
- Data Breaches
- Malware and Ransomware
- Cybersecurity Solutions
- Cybersecurity Regulations and Compliance
Industrial Systems Under Fire as Hackers Exploit Remote Code Flaw
by: Jairo J. Rodriguez U. A newly disclosed remote code execution (RCE) flaw is being actively exploited by threat actors to target operational technology (OT) environments,…
Water Systems Under Attack: Norway, Poland Blame Russian Actors
by: Jairo J. Rodriguez U. Cyberattacks on critical infrastructure are escalating in Northern and Eastern Europe, with water systems now in the crosshairs. Authorities in Norway…
Persistent Russian Hacktivist Activity Exposes Ongoing Risks to Poland’s Energy Sector
by: Jairo J. Rodriguez U. A Familiar Target Under Renewed Fire A Polish power plant has once again found itself in the crosshairs of Russian hacktivists,…
CISA Flags WinRAR Zero-Day (CVE-2025-8088) as Actively Exploited
by: Jairo J. Rodriguez U. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a new critical vulnerability affecting WinRAR—tracked as CVE-2025-8088—to its Known Exploited…
U.S. Sounds Alarm Over Surge in Iranian Cyber Campaigns Targeting Defense and Critical Infrastructure
By: Jairo J. Rodriguez U. – Senior Cybersecurity Engineer U.S. federal agencies are warning that Iranian state-sponsored hackers are ramping up operations against a broad range…
CyberArk and HashiCorp Flaws Open the Door to Remote Vault Takeover
by: Jairo J. Rodriguez U. – Senior Cyber Security Engineer Two of the most trusted names in secrets management—CyberArk and HashiCorp—are patching critical flaws that could…
US Nuclear Agency Caught in SharePoint Cyberstorm
by: Jairo J. Rodriguez U. – Senior Cybersecurity Engineer The U.S. National Nuclear Security Administration (NNSA), the agency responsible for managing the country’s nuclear weapons and…
“Shade BIOS” Attack: A New Breed of Stealth Malware That Outruns Every Defense
by: Jairo J. Rodriguez U. – Senior Cybersecurity Engineer Security researchers have identified a disturbing new threat model called Shade BIOS—a technique that manipulates system firmware…
Critical NVIDIA Triton Vulnerabilities Open Door to AI Server Hijack, Say Researchers
by: Jairo J. Rodriguez U. – Senior Cybersecurity Engineer In a striking discovery with wide-reaching implications, security researchers at Wiz have uncovered a chain of critical…
Fortinet Zero-Day Vulnerability Enables Remote Code Execution in FortiGate Firewalls
A critical zero-day vulnerability has been identified in Fortinet’s FortiGate firewalls, potentially allowing unauthenticated attackers to execute arbitrary code remotely. This flaw poses a significant threat…
CVE-2025-24054 Under Active Attack – New Exploit Steals NTLM Hashes on File Download
A newly disclosed Windows vulnerability, tracked as CVE-2025-24054, is currently being exploited in the wild, allowing attackers to harvest NTLM authentication hashes simply by tricking users…