cybersecurity news

Malicious MCP Servers Enable New Prompt Injection Attack To Drain Resources

Unit 42 researchers at Palo Alto Networks exposed serious flaws in the Model Context Protocol (MCP) sampling feature used in…

4 months ago

Law Enforcement Detains Hackers Equipped With Specialized Flipper Hacking Tools

Polish police have arrested three Ukrainian men traveling through Europe and seized a cache of advanced hacking equipment that could…

4 months ago

Hundreds Of Porsche Cars Rendered Inoperable After Satellite Security System Failure

Owners of hundreds of Porsche cars in Russia cannot drive their vehicles after a significant failure in the factory-installed satellite…

4 months ago

Android Introduces In-Call Scam Shield That Pauses Calls For 30 Seconds During Financial App Use

Google is rolling out a new defense against phone scams on Android devices. Called in-call scam protection, this feature pauses…

4 months ago

SageMaker Vulnerability Enables Privilege Escalation By Attackers

AWS SageMaker provides managed Jupyter notebook instances for data science tasks. These instances link to IAM execution roles with broad…

4 months ago

Lazarus Group Hacker Captured On Camera Amid IT Worker Scheme Bust

Researchers from BCA LTD, NorthScan, and ANY.RUN trapped North Korean Lazarus Group operatives, linked to the Famous Chollima division, live…

4 months ago

Arizona Attorney General Sues Chinese Retailer Temu Over Alleged Data Theft

Arizona Attorney General Kris Mayes has filed a landmark lawsuit against Chinese e-commerce giant Temu and its parent company, PDD…

5 months ago

India’s New SIM Registration Requirement For WhatsApp, Signal, Telegram, and Other Messaging Apps

India's Department of Telecommunications (DoT) has issued a directive mandating continuous SIM binding for popular messaging apps, requiring an active…

5 months ago

Critical Longwatch RCE Vulnerability Enables High-Privilege Remote Code Execution

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert for a remote code execution (RCE) vulnerability…

5 months ago

Authorities Seize Domains Linked To Tai Chang Cryptocurrency Investment Scam

The U.S. Justice Department has seized a key web domain used in a major cryptocurrency investment fraud scheme tied to…

5 months ago