Chinese AI platform DeepSeek suspends new registrations following a DDoS attack amid its rising popularity and competition with ChatGPT. The platform faces additional security concerns as researchers discover vulnerabilities in its R1 model that could be exploited to generate malicious con...
Security researchers discovered 49 zero-day vulnerabilities at Pwn2Own Automotive 2025, earning $886,250 in prizes. The competition tested automotive software and hardware security, including EV chargers and infotainment systems, with Summoning Team's Sina Kheirkhah winning the top prize o...
A global malware campaign using fake CAPTCHA verification systems to spread the Lumma information stealer has been discovered, targeting multiple countries and industries. The attack tricks users into executing malicious commands through Windows Run, deploying PowerShell scripts that bypas...
Multiple security vulnerabilities dubbed "PANdora's Box" have been discovered in Palo Alto Networks firewall models PA-3260, PA-1410, and PA-415. The flaws include BootHole, InsydeH2O UEFI firmware issues, LogoFAIL, and PixieFail vulnerabilities, potentially enabling firmware compromise an...
A sophisticated backdoor campaign "J-magic" targets Juniper Networks routers across semiconductor, energy, manufacturing, and IT sectors in 12 countries. The malware, active between mid-2023 and mid-2024, monitors TCP traffic for specific "magic packets" and primarily affects routers funct...
