Cryptocurrency wallet providers MetaMask and Phantom have issued advisories warning users regarding the novel Demonic flaw, which could be exploited to compromise their wallets' secret recovery phrases, or seeds, and facilitate the theft of all stored cryptocurrency and NFTs, BleepingComputer reports.

Cybersecurity practices at small and medium-sized businesses continued to be dismal, with only 38% of employees and managers noting more frequent password manager usage, while only 37% and 36% conducted more cybersecurity training sessions and executed new security policies, respectively, reports TechRadar.

Sixty-two percent of security leaders around the world surveyed by Radware reported having at least a third of APIs that are undocumented, even though 92% believed having sufficient API protection, indicating the prevalence of a false sense of security in APIs, according to VentureBeat.

BleepingComputer reports that forced updates have been implemented for WordPress sites leveraging the Ninja Forms plugin, which was discovered by Wordfence researchers to be impacted by a critical code injection flaw that could be exploited to facilitate site takeovers.

Malicious actors could abuse a high-severity flaw in the widely-used Fastjson library to enable remote code execution, reports The Hacker News.

On the heels of a White House Cybersecurity Executive Forum, HHS HC3 is urging the healthcare sector to make use of free resources to improve risk assessments and overall cyber resiliency.

The U.S. government has been urged by House Armed Services Committee Chairman Adam Smith, D-Wash., to significantly increase investments in upgrading national security communications and software to ensure that they are adequately protected against cybersecurity threats, CyberScoop reports. "We're talking about software systems that, you know, operate our missiles and our ships and everything, they just don't, they are not as protected as they should be.