Threat intelligence and security reporting from 16 trusted sources.
Updated 7 hours ago · 7 stories in the last 24 hours
Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI.
This is a current list of where and when I am scheduled to speak: I’m speaking at the Catalyst Summit in Brampton, Ontario, Canada, on Wednesday, November 18,...
The U.S. government has disrupted a North Korean social engineering campaign called 'FaceStealer', responsible for stealing more than $400 million in cryptocurrency.
Overreliance on AI could erode the creativity, clear communication, and critical thinking security teams need when there’s no playbook.
Fully automated ransomware hasn’t arrived—yet. But seemingly unsophisticated attackers are using AI tools to wreak havoc.
The tech giant has detailed the architecture designed to isolate ambient sensor data from the main OS on HomeView and new iPhones.
Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update.
Climate change is the issue. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.
Open source hacking tool Artex "significantly reduces the time required to chain attack techniques, with some intrusions progressing from initial targeting to privileged access in under three hours,"...
SCKit abuses ScreenConnect to deploy unauthorized remote access and target technicians. Explore the attack chain, mitigations, and Microsoft Defender XDR hunting.
VulnCheck disclosed 14 vulnerabilities in Dixell refrigeration units that give an attacker root access, while online honeypots are being flooded with hacks and malicious probes.
AI-enabled penetration testing and red team frameworks can automate and chain reconnaissance, vulnerability testing, and follow-on actions, lowering the skill threshold for attackers and accelerating intrusions when the...
The United States this week signed on to an international set of industry standards for commercial offensive cyber tools that human rights groups and other advocates wish had...
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.
CybrFunk was created on January 17, 2021 with the intent of making reliable cyber security news and threat intelligence more accessible to the public. We aim to be a central hub for the best cyber security news and threat intelligence. In an ever changing landscape, we hope to make your trip a little easier and safer.
