Author: CyberMind

A critical vulnerability in NASA’s open-source AMMOS Instrument Toolkit (AIT)-GUI ground software has been found that could allow unauthenticated attackers to issue spacecraft and instrument commands, execute server-side scripts and run command sequences. AIT-GUI is the browser-based operator console for… Read More "NASA Ground Control Software Flaw Enables Unauthenticated Commands"

Enterprise applications now carry 4.31 times more critical and high-severity vulnerabilities than before the acceleration of AI-driven software development. Sonatype analyzed four years of enterprise software development data and found that application creation has accelerated almost fivefold in the AI… Read More "Enterprise Applications Carry 4.31x More Critical and High Vulnerabili"

Security researchers at Wiz, part of Google Cloud, have discovered a critical script injection vulnerability in one of Snowflake’s public repositories on GitHub that GitHub’s Advanced Security missed. The discovery has been attributed to Wiz Research’s Red Agent, an autonomous,… Read More "Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw"

Over 220,000 cases were filed with the UK’s National Fraud Database (NFD) between January and June, the highest number ever recorded during the first half of a year, according to Cifas. The non-profit, which runs the NFD and the Insider… Read More "UK Fraud Cases Hit Record High"

The UK’s data protection watchdog has urged police forces using live facial recognition (LFR) technology to improve their data governance in line with best practice. Emily Keaney, deputy commissioner for regulatory policy at the Information Commissioner’s Office (ICO), said in… Read More "ICO Urges Police to Improve Data Governance in Facial Recognition Roll"

Medusa ransomware has impacted over 500 critical infrastructure organizations as of April 2026, according to a new FBI advisory. An earlier US government advisory on the ransomware-as-a-service (RaaS) operation, published in March 2025, reported that Medusa affiliates had hit over… Read More "Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomwar"

Following the recent Hugging Face incident, in which an OpenAI model went rogue and targeted the open-source platform while attempting to complete a task, the AI firm said it is adding greater urgency to its efforts to strengthen AI safeguards.… Read More "OpenAI Tightens AI Safeguards Following Hugging Face Incident"

Grandoreiro has resurfaced in a campaign targeting Latin American users, with Mexico accounting for 40% of observed detections and attackers using DLL sideloading to execute the banking trojan through legitimate software. The Brazilian-origin malware remains active despite a major law-enforcement… Read More "Grandoreiro Resurfaces in Mexico With New DLL Sideloading Campaign"

A malware-as-a-service (MaaS) campaign has combined ClickFix social engineering with the ErrTraffic delivery service and Cruciferra loader, giving attackers a way to distribute malware while disabling endpoint security processes. In a new advisory published earlier today, eSentire’s Threat Response Unit… Read More "MaaS Campaign Combines ClickFix, ErrTraffic and Cruciferra"

A major industry coalition set up to defend critical open-source software against AI-enabled cyber threats is expected to operationalize its vulnerability disclosure and remediation platform in September, Infosecurity has learned. The initiative, called Akrites, was launched at the end of… Read More "Exclusive: Linux Foundation’s Akrites to Go Live in September"