Explore

Rapid Read Rapid Read
North Korean Hackers Used npm Package as Prelude to Axios Attack

North Korean Hackers Used npm Package as Prelude to Axios Attack

Amazon's security researchers have identified a North Korean hacking group that targeted small software packages before compromising the widely used axios library. The group, linked to the recent axios breach, initially planted malicious code in a package called typo-crypto in March 2025. This early attack served as a rehearsal for larger operations. The group also compromised two other packages, debug and chalk, in September 2025. The attackers built relationships with maintainers to publish updates containing hidden code, leveraging generative AI to create convincing personas.
Trendline Trendline
GitLab Releases Security Patches to Address High-Severity Vulnerabilities

GitLab Releases Security Patches to Address High-Severity Vulnerabilities

GitLab Releases Security Patches to Address High-Severity Vulnerabilities
Trendline Trendline
AiTM Phishing Emerges as Top Threat to Law Firms

AiTM Phishing Emerges as Top Threat to Law Firms

AiTM Phishing Emerges as Top Threat to Law Firms
Trendline Trendline
Cisco Systems Releases Hotfixes for High-Security Vulnerability in Firewall Management Center

Cisco Systems Releases Hotfixes for High-Security Vulnerability in Firewall Management Center

Cisco Systems Releases Hotfixes for High-Security Vulnerability in Firewall Management Center
Rapid Read Rapid Read
Cyberattack Targets Over 30 Minnesota Water Systems, Prompting Statewide Response

Cyberattack Targets Over 30 Minnesota Water Systems, Prompting Statewide Response

A coordinated cyberattack targeted more than 30 community water systems in Minnesota, affecting operational technology systems. The attacks occurred on July 26 and 27, prompting Minnesota IT Services (MNIT) to activate its cybersecurity incident response capabilities. The agency is working with state, federal, and local authorities to investigate the incident and assist affected communities. The Minnesota Department of Health is involved to ensure public health remains protected. The identity of the attackers is not yet known, but the incident highlights ongoing concerns about cybersecurity threats to critical infrastructure.
Trendline Trendline
Kremlin Hackers Exploit Exchange Server Flaw for Credential Theft

Kremlin Hackers Exploit Exchange Server Flaw for Credential Theft

Kremlin Hackers Exploit Exchange Server Flaw for Credential Theft
Rapid Read Rapid Read
FBI Warns of Cyberattacks on U.S. Water Systems, Possible Iranian Hackers Involved

FBI Warns of Cyberattacks on U.S. Water Systems, Possible Iranian Hackers Involved

The FBI and the Environmental Protection Agency (EPA) have issued a warning about cyberattacks targeting water and wastewater systems in the U.S. These attacks have affected systems in at least seven states, disrupting operations and causing issues like pressure loss and flooding. The attacks involved altering IP addresses and passwords of programmable logic controllers, leading to a loss of monitoring and control functions. Authorities suspect Iranian hackers may be behind these attacks, although investigations are ongoing.
Rapid Read Rapid Read
G7 Cyber Expert Group Concludes 2026 Cross-Border Coordination Exercise to Enhance Cyber Resilience

G7 Cyber Expert Group Concludes 2026 Cross-Border Coordination Exercise to Enhance Cyber Resilience

The G7 Cyber Expert Group has successfully concluded its 2026 Cross-border Coordination Exercise (CBCE), demonstrating a commitment to strengthening cyber resilience across the G7 financial sector. The exercise, held on May 18, 2026, aimed to enhance preparedness by simulating a large-scale cyber-attack affecting all G7 jurisdictions. The scenario involved ministries of finance, central banks, bank supervisors, and market authorities, fostering a unified response. The exercise tested improvements identified in previous simulations and workshops, focusing on incident response, recovery, and crisis communication. The U.S. Department of the Treasury, preparing to assume the G7 Presidency, emphasized the importance of deepening practical cooperation through the G7 Cyber Expert Group.
Rapid Read Rapid Read
Minnesota Water Systems Hit by Coordinated Cyberattack, Prompting Statewide Response

Minnesota Water Systems Hit by Coordinated Cyberattack, Prompting Statewide Response

More than 30 community water systems in Minnesota were targeted in a coordinated cyberattack, according to state officials. The attacks, which occurred over a two-day period, affected operational technology but did not disrupt water service to residents. Minnesota Information Technology Services (MNIT) confirmed the attacks and stated that no ransom was detected. The agency is working with local, tribal, and federal officials, including the FBI, to investigate the incident. Cities such as Plymouth and Braham reported temporary equipment malfunctions but managed to maintain water service by switching to manual operations. The state has activated its cybersecurity incident response capabilities to address the situation.
Rapid Read Rapid Read
Codex Security CLI Enhances Vulnerability Management for Developers

Codex Security CLI Enhances Vulnerability Management for Developers

Codex Security has introduced a command-line interface (CLI) tool designed to help developers identify and address vulnerabilities in their code. The CLI allows for local scans of repositories, providing detailed reports on findings and coverage. It supports integration with GitHub and other platforms, enabling developers to manage security assessments efficiently. The tool requires Node.js and Python for operation and offers features like device authentication and API key usage for secure access. Codex Security's CLI is currently in beta, with a focus on improving security workflows for engineering teams.
Rapid Read Rapid Read
Cyberattack Disrupts Water Utilities in Over 30 Minnesota Communities, Prompting Security Response

Cyberattack Disrupts Water Utilities in Over 30 Minnesota Communities, Prompting Security Response

A cyberattack disrupted water and wastewater utilities in more than 30 Minnesota communities, including Plymouth and Braham, over a two-day period. The attack targeted equipment connected via cellular communications, but water quality remained unaffected. Minnesota Information Technology Services is leading the response, working with state and federal agencies to contain and investigate the attack. The incident is part of a broader pattern of cyber threats against U.S. water facilities, with no specific party yet attributed to the Minnesota attacks. The response includes sharing threat intelligence and providing guidance to affected utilities.
Rapid Read Rapid Read
US and Australia Issue OT Isolation Guidance for Critical Infrastructure

US and Australia Issue OT Isolation Guidance for Critical Infrastructure

The US Cybersecurity and Infrastructure Security Agency (CISA) and Australia's Cyber Security Centre (ACSC) have released joint guidance for isolating operational technology (OT) systems in critical infrastructure. The guidance aims to enhance cyber resilience by detailing steps for isolating vital systems to ensure continuity of critical services during disruptions. It advises organizations to identify and classify systems, establish isolation points, and develop plans for operating in isolation. The guidance also addresses potential risks, such as reduced visibility and increased infection risk, and provides resources for improving preparedness and response.