Author: CyberMind

A critical-severity VMware vCenter vulnerability has been exploited within five days of disclosure by Broadcom, with attackers deploying an open-source reverse shell to hold access to compromised systems. The treat research team at German firm Quirso discovered the campaign during… Read More "vCenter Flaw Exploited Just Five Days After Disclosure"

Google Cloud has divided its post-quantum migration into interim deadlines, targeting its first major risk domain for completion by the end of 2027. The roadmap, published on August 12, organized the work into three risk domains drawn from Google’s own… Read More "Google Targets 2027 for First Major Post-Quantum Security Milestone"

A compromised AWS access key was the likely root cause of the cyber-attack on CRM provider Beacon, which has exposed personal information held by around 1500 UK charities. The software provider said in an August 12 incident update that the… Read More "Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charit"

An “unprecedented cyber incident” in which OpenAI agents broke free of an internet-isolated sandbox and hacked Hugging Face was largely driven by an improvised messaging board they created, the AI company has revealed. The agents were working on a “capture-the-flag”… Read More "OpenAI: Hugging Face Incident a “Warning Shot” to the World"

Boston Scientific has become the latest medical technology (medtech) company to be hit by a major cyber incident, leading to widespread IT disruption. The US-headquartered firm said in a brief statement published on August 26 that the incident was identified… Read More "Boston Scientific Suffers Global Disruption After Cyber Incident"

The US Cybersecurity and Infrastructure Security Agency (CISA) added six new flaws to its Known Exploited Vulnerabilities (KEV) catalog in a single day on August 26, urging government agencies and critical infrastructure organizations to patch them quickly. CISA KEV listing… Read More "CISA Warns of Six Exploited Flaws in Microsoft, Linux and Citrix"

A sophisticated Chinese hacking group known as QTFY is actively targeting US government and critical infrastructure systems via an ecosystem of custom-built malicious platforms, the FBI has warned. The group has focused on critical infrastructure sectors including defense industrial base… Read More "Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Inf"

Customer data relating to car park, lounge and Fast Track bookings, and in-airport Wi-Fi sign-ups at three UK airports has been obtained by an unauthorized third party. Manchester Airports Group (MAG), which operates Manchester, London Stansted and East Midlands airports,… Read More "Manchester Airports Group Hit by Cyber Incident"