Rapid7 observes new Palo Alto VPN flaw exploited in the wild to bypass GlobalProtect authentication
A flaw fixed last month is now being used in real-life attacks, and security researchers are urging users to patch.
Tag
Computing Security
Live stream
RIVO news Listen to this section's headlines in an AI voice
Now:
Press play to start the stream
This browser does not support voice playback. Try Chrome, Edge or Safari.
Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing
Security researchers spotted a new campaign using the same methods as TeamPCP.
Ransomware groups grow revenue by almost 40% in Q1 2026
Initial Access Brokers are removing a major pain point helping ransomware operators steal more.
Thousands of compromised websites abused by DriveSurge in active ClickFix and FakeUpdates campaigns
SilentPush is warning about an Intial Access Broker campaign called DriveSurge that uses thousands of websites to deploy a backdoor.
Security
OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens
A tool started benign and turned sour after a little while, stealing tokens and granting persistent access.
Security
Multiple Linux distros hit by major ‘CIFSwitch’ flaw that gives attackers root access
If you're using Linux, make sure you patch up and disable unnecessary file sharing features.
WP Maps Pro plugin flaw to create admin accounts on WordPress sites saw 3,600 attempts in a single day
Thousands of attacks were seen in a single day as a patch is rolled out.
17 million strong botnet of compromised devices dismantled by Dutch authorities
The botnet is theorized to be related to Asocks, with the possibility the proxy network has bitten the dust.
Meta patches flaw that allowed MetaAI support bot to hand out password reset links without 2FA
Hackers were targeting high-profile accounts by tricking AI into sharing reset codes without validation.
Security
FIFA websites spoofed by hackers ahead of 2026 World Cup, FBI warns
Dozens of fake FIFA sites are out there, stealing people's data and possibly even money.
Security
CISA warns that Nx Console and GitHub repositories abused in multiple supply chain compromises – tools across enterprise, cloud, and DevOps environments exploited
The agency is giving practical advice on how to remain secure in an increasingly unsecure environment.
VPN Privacy & Security
Palantir’s ‘unlimited access’ to patient data — we examine the US tech giant’s controversial £330 million contract with the NHS
While the NHS has just granted Palantir "unlimited access" to patient data, the relationship between the UK public health sector and the controversial American firm dates back to 2020. Here's…
Security
Carnival cruise operator confirms nearly 6 million people affected in data breach
in late April, ShinyHunters claimed responsibility for the breach.
Security
A Russian hacker tricked a 17,000-strong MAGA Telegram channel with a jailbroken AI for over 5 years, leading to fraud, credential theft, and an empty crypto wallet
The threat actor tricked tens of thousands of MAGA and QAnon community members into believing he was a USAF veteran.
VPN Privacy & Security
FBI confirms 25 ransomware groups using First VPN’s now seized services — here’s what we know
FBI links First VPN’s activities to gangs involved in cybercrime and calls for tighter security controls and behavioural monitoring to prevent cyberattacks.
Security
82% of IT pros report a web-based security incident in past year – BYOD, SaaS tools, and remote work policies all play a part in security resilience
Confidence is high, despite malware running rampant and businesses losing login credentials left and right.
Security
EU to talk with Anthropic over access to Mythos AI Model
The European Commission is sending representatives to San Francisco to talk about using Mythos.
Security
Security teams can’t keep up with how fast AI is cracking cloud security
Businesses are aware of AI-powered attacks, but their infrastructure can't keep up with the speed of change.
Security
Websites are using this FROST-y new technique to spy on users by snooping on their SSD activity
A new side-channel attack was discovered but exploiting it is not as easy as it sounds.
Security
The FBI warns Microsoft 365 services are being bombarded with new phishing emails — here are 3 steps you can take to stay safe
Kali365 is abusing legitimate Microsoft login mechanisms to hijack Outlook, Teams, and OneDrive services.
Security
GCHQ debuts world-first AI cyber defense system to detect threats across critical national infrastructure, airlines, telecoms, and major companies
The UK wants to use AI to defend against Russia and China's "relentless attacks" on critical infrastructure.
Security
Hackers abuse UltraVNC, Splashtop, and ScreenConnect to hijack business PCs
Numerous legitimate tools being used in RMM attacks against Brazilian targets.
Security
Hackers are turning up to victim’s work dressed as IT support to install malware in-person, FBI warns
If a remote session fails, hackers will come to install malware in person.
VPN Privacy & Security
Cybercriminals are using GTA 6 hype to spread malware ahead of launch, NordVPN warns
NordVPN warns GTA 6 fans about fake beta keys, phishing pages, Android adware, and malware disguised as early access downloads.
Computing Security
‘This technology turns every router into a potential means for surveillance’: researchers warn you can be tracked and identified from Wi-Fi signals
Feedback signals used by ordinary routers can be tapped into to identify you based on the way you walk.