New ransomware targets AI model weights and can't even collect the ransom

The same attacker broke into the same internet-facing Langflow server twice, and the second time brought ransomware built to destroy trained AI models. Sysdig's Threat Research Team documented th [...]

Congress let a key cybersecurity law expire this week, leaving US networks more vulnerable

There's a long list of reasons US stability is now teetering between "Fyre Festival" and "Charlie Sheen's 'Tiger Blood' era." Now you can add cybersecurity to t [...]

CitrixBleed 2 exploits are now in the wild, so patch now

Multiple researchers are warning about CitrixBleed 2, a critical-severity flaw in Citrix NetScaler ADC and NetScaler Gateway. [...]

Protecting the US from hackers apparently isn't in Trump's budget

Members of the Department of Homeland Security's Cybersecurity and Infrastructure Security Agency (CISA) are being forced to choose between staying at their jobs or taking a government buyout, NP [...]

CISA warns hackers are increasingly targeting US water systems after Minnesota attack

A coordinated intrusion knocked out industrial controllers at more than 30 Minnesota water systems. The US cyber-defence agency is telling utilities to get that hardware off the internet. The US cyber [...]

Claude Mythos exposed a hard truth: Your enterprise patching process is way too slow

In 2024, researchers from the University of Illinois found that GPT-4, when provided with a common vulnerabilities and exposures (CVE) description, could autonomously exploit 87% of a curated 15-vulne [...]

Critical CitrixBleed 2 vulnerability has been under active exploit for weeks

Exploits allow hackers to bypass 2FA and commandeer vulnerable devices. [...]

Trump’s FY27 budget would cut $700M from CISA and kill election security

In short: The Trump administration’s FY2027 budget proposes cutting $707 million from CISA, eliminating the agency’s election security programme entirely and shedding 860 positions, a dramatic es [...]

CISA warns Motex Landscope Endpoint Manager has a worrying security flaw, so patch now

The critical severity bug is being actively exploited in the wild, possibly by ransomware actors, CISA says. [...]