News Archive
2287 stories · page 91 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
AI-Generated Workflows Are a Silent Security Disaster
The increasing use of artificial intelligence to generate automated workflows presents a significant, often overlooked, security risk, according to an assessment by zeroday.news. These AI-driven processes, while designed to enhance efficiency, can inadvertently introduce vulnerabilities that compromise sensitive data and system integrity.
The Realities of AI Video Surveillance
Artificial intelligence is significantly enhancing the capabilities of video surveillance systems, allowing for more sophisticated and targeted monitoring. New AI tools enable users to query vast amounts of video footage using natural language, a substantial leap from previous systems limited to a predefined set of search parameters.
USB drives carrying China-linked malware infected Japanese military networks for nearly a year
Internal documents indicate that counterfeit USB drives infected with malware, linked to Chinese state-sponsored operations, were used on sensitive Japanese military networks for nearly a year. The Ground Self-Defense Force (JGSDF) reportedly received these compromised drives in March 2024, during disaster relief efforts following an earthquake in central Japan. This bypass of standard…
Apple Releases June Software Updates
Apple issued software updates on Monday for its iOS/iPadOS and macOS operating systems, along with a refresh for its Safari web browser. These releases mark the latest security and feature patches from the technology giant.
NIST Enrichment Reductions Impact CVE Coverage, Accuracy
The National Institute of Standards and Technology (NIST) has reduced the number of Common Vulnerabilities and Exposures (CVEs) it selects for detailed analysis, a change that has yielded mixed outcomes, according to recent observations.
'Djinn' Stealer Targets Cloud, AI Credentials
A newly identified information-stealing malware, dubbed "Djinn," is actively targeting credentials that bridge cloud environments, artificial intelligence platforms, and broader enterprise systems. The malware's initial distribution vector exploits a critical authentication bypass vulnerability, identified as CVE-2026-48558, present in the remote support software SimpleHelp.
Vulnerabilities Expose Private Data in Indian Government Systems
A security researcher has identified significant vulnerabilities within Indian government systems, one of which could have granted unauthorized access to a national government portal. The researcher, who has not been publicly named, disclosed that a critical flaw could have enabled any individual to gain complete control over the portal.
Can Clothes Make You Invisible to Facial Recognition?
A researcher has developed a concept for graphic t-shirts designed to disrupt facial recognition systems. The idea centers on using specific patterns and designs on clothing to confuse the artificial intelligence algorithms employed by surveillance cameras.
Iran, Russia, China Target Water Systems for Sabotage
Nation-state actors, reportedly from Iran, Russia, and China, have successfully infiltrated industrial control systems within the water sector, exploiting basic security vulnerabilities rather than advanced malware. These attacks have targeted Programmable Logic Controllers (PLCs) that manage critical water infrastructure operations.
Factoring RSA Keys with Many Zeros
Researchers have identified a new class of weak RSA encryption keys that contain numerous zeros in their structure. These keys, found in real-world deployments, could potentially be factored more easily than standard RSA keys. The discovery was made by analyzing a large dataset of public keys collected from various sources, including Certificate Transparency logs, internet-wide scans for TLS…
29th June – Threat Intelligence Report
A recent threat intelligence report has detailed a range of cyber incidents, from supply chain attacks and data breaches affecting major companies to the exploitation of artificial intelligence technologies for malicious purposes. The report highlights the ongoing evolution of cyber threats, emphasizing the need for robust security measures across various sectors.
From Bing Search to Ransomware: Bumblebee and AdaptixC2 Deliver Akira
In July 2025, a targeted cyberattack campaign initiated through SEO poisoning successfully compromised a network by luring a user searching for "ManageEngine OpManager" to a fraudulent website. This site delivered a trojanized installer, which, upon execution, deployed the Bumblebee malware. The initial infection was facilitated by a malicious MSI installer, executed by an IT administrator who…
Modernizing Global Vulnerability Standards For The Age Of AI
The rapid advancement of AI in discovering software vulnerabilities is straining existing cybersecurity standards and frameworks, which were designed for human-led discovery and a slower pace of threat evolution. This acceleration necessitates a re-evaluation of how vulnerabilities are managed, from discovery and verification to disclosure and prioritization.
Amazon Q VS Extension Flaw Leads to Cloud Credential Theft
A security flaw has been discovered that could allow attackers to steal cloud credentials by planting a malicious repository. This vulnerability affects Amazon's Q, a generative AI assistant, and highlights the increasing risks associated with multi-cloud platform (MCP) environments.
Robot Police Officers
The Sacramento County Sheriff's Office has demonstrated a novel application of drone technology in law enforcement, successfully using a drone equipped with a magnet to disarm a suspect. The incident, captured in a video shared on the Sheriff's Office's Instagram account on June 22, showcases a drone retrieving a knife from an armed individual barricaded inside a residence.
Cybercriminals Target Email Inboxes for Identity Theft
Email inboxes are increasingly targeted by cybercriminals due to their central role in digital identity and access, according to cybersecurity researchers. Attackers leverage compromised email accounts to gain broader access to other online services, facilitate financial fraud, and launch more sophisticated attacks.
Third-Party Breaches Teach Education Sector a Costly Lesson in Vendor Risk
The education sector is facing increasing risks from third-party breaches, prompting institutions to bolster their defenses against attacks targeting sensitive student data. These attacks often involve ransomware and other malicious activities, highlighting a critical need for improved vendor risk management.
The Chinese Control the Majority of Argentina’s Squid Fleet
A significant portion of Argentina's squid fishing fleet is reportedly under the control of Chinese entities. This situation raises questions about the management and oversight of the nation's valuable marine resources.
AI Decline? Confidence in Autonomous Penetration Testing Falls
Confidence in the effectiveness of artificial intelligence for automated penetration testing is waning, despite ongoing experimentation by organizations seeking to identify security vulnerabilities. While companies continue to explore AI-driven tools for security assessments, a notable decrease in reliance on this technology has been observed.
Cisco Adds NHI to Security Stack With Astrix, WideField Acquisitions
Cisco is enhancing its security offerings by acquiring two companies, Astrix Security and WideField, to bolster its capabilities in securing the agentic workforce. This strategic move signals Cisco's commitment to making identity the central element in its security architecture.
Meta Is Testing Facial Recognition for Police and Military
Meta is reportedly developing facial recognition technology that could be integrated into eyewear, with a Pentagon supplier involved in the prototyping phase. This development comes as U.S. Immigration and Customs Enforcement (ICE) has expressed interest in deploying similar facial recognition glasses capable of real-time identification.
New Initiative Tackles Security for End-of-Life Open Source Software
A new initiative called the Open Source Sustainability Initiative has been established to confront the security risks posed by open source software that has reached its end-of-life. The program's central objective is to support organizations in their efforts to manage and secure these legacy projects, thereby helping them maintain compliance with applicable regulations.
AI Won't Wipe Out Entry-Level Cybersecurity Jobs
Artificial intelligence is not expected to displace entry-level cybersecurity roles, but rather to augment them and create new opportunities. Experts suggest that as AI tools become more prevalent in the industry, the demand for cybersecurity professionals with strong human decision-making capabilities will increase.
Meeting Trump's 2030 Quantum Deadline Will be Expensive, Complex
The ambitious 2030 deadline for quantum computing readiness, as outlined by former President Trump, presents significant financial and technical hurdles. Achieving this goal will require substantial investment and complex strategic planning across various sectors.