Skip to main content
← All Tags

Cybersecurity

638 articles in this category (Page 12 of 27)

AI NewsCybersecurityMalware

Hackers Use LinkedIn Messages to Spread RAT Malware Through DLL Sideloading

A new LinkedIn phishing campaign delivers a remote access trojan (RAT) via DLL sideloading, exploiting trusted software and bypassing traditional security measures.

Read more
AI NewsCybersecurityCloud Security

Microsoft & Anthropic MCP Servers at Risk of RCE, Cloud Takeovers

Researchers discovered critical vulnerabilities in Model Context Protocol (MCP) servers, potentially leading to remote code execution and cloud account takeovers.

Read more
AI NewsCybersecurityEmail Security

Zendesk Instances Leveraged in Mass Spam Campaigns

Recent spam attacks originating from legitimate Zendesk instances have impacted users, with one report citing over 800 spam emails bypassing iCloud filters.

Read more
AI NewsCybersecuritySoftware Vulnerability

Anthropic MCP Git Server Vulnerabilities Enable RCE via Prompt Injection

Three vulnerabilities in Anthropic’s MCP Git server allow remote code execution (RCE) through prompt injection attacks.

Read more
AI NewsCybersecurityDevSecOps

Why Secrets in JavaScript Bundles are Still Being Missed

Scanning 5M apps uncovered 42K exposed secrets in JavaScript bundles, highlighting shortcomings in current SAST and DAST practices.

Read more
AI NewsCybersecurityHealthcare

ChatGPT Health Raises Big Security, Safety Concerns

OpenAI's ChatGPT Health promises secure data handling, but raises significant questions regarding user privacy and potential for inaccurate health advice.

Read more
AI NewsCybersecurityPrompt Injection

Google Gemini Prompt Injection Exposes Calendar Data via Malicious Invites

A recent vulnerability in Google Gemini allowed unauthorized access to private Google Calendar data through a cleverly disguised prompt injection attack.

Read more
AI NewsCybersecurityHardware

New StackWarp Hardware Flaw Breaks AMD SEV-SNP Protections on Zen 1–5 CPUs

StackWarp allows privileged hosts to execute code inside AMD SEV-SNP confidential VMs, impacting Zen 1–5 processors.

Read more
AI NewsCybersecurityMalware

StealC Malware Panel Vulnerability Exposed Threat Actor Operations

Researchers exploited an XSS flaw in the StealC malware panel to monitor a threat actor’s operations, stealing over 30 million cookies and 390,000 passwords.

Read more
AI NewsCybersecurityThreat Intelligence

Fortinet Exploits, AI-Powered Attacks & Emerging Malware Dominate Recent Cybersecurity Landscape

This week’s recap highlights a critical Fortinet vulnerability and the rise of sophisticated attacks leveraging AI and evolving malware frameworks.

Read more
AI NewsCybersecurityFinTech

SAFEGUARD RECOVERY EXPERT: Crypto Asset Recovery Service

One investor recovered $278,000 in cryptocurrency lost to fraudulent brokers using a specialized recovery service.

Read more
AI NewsCybersecurityAI Applications

AI System Reduces Attack Reconstruction Time From Weeks to Hours

PNNL’s ALOHA system leverages AI to reduce attack reconstruction time from weeks to hours, accelerating threat emulation and defense.

Read more
AI NewsCybersecurityThreat Intelligence

China-Linked APT Exploits Sitecore Zero-Day in Critical Infrastructure Intrusions

Cisco Talos reports China-linked APT UAT-8837 leveraging a Sitecore zero-day (CVE-2025-53690, CVSS 9.0) against North American critical infrastructure.

Read more
AI NewsCybersecurityVulnerability

Cisco Patches Zero-Day RCE Exploited by China-Linked APT in Secure Email Gateways

Cisco addressed CVE-2025-20393, a critical 10.0 CVSS zero-day RCE flaw in AsyncOS, exploited by the China-linked UAT-9686 APT group.

Read more
AI NewsCybersecurityBrowser Security

Malicious Chrome Extensions Target Workday & NetSuite for Account Takeover

Five rogue Chrome extensions impersonating legitimate platforms like Workday and NetSuite have been discovered, resulting in stolen cookies and compromised admin controls.

Read more
AI NewsCybersecurityMalware

GootLoader Malware Employs 500-1,000 Concatenated ZIP Archives for Evasion

GootLoader malware utilizes malformed ZIP archives containing 500–1,000 concatenated files to bypass detection by tools like WinRAR.

Read more
AI NewsCybersecurityThreat Intelligence

LOTUSLITE Backdoor Targets U.S. Policy Entities Using Venezuela-Themed Spear Phishing

China-linked attackers deployed the LOTUSLITE backdoor against U.S. government targets via Venezuela-themed phishing, highlighting continued reliance on DLL side-loading.

Read more
AI NewsCybersecurityVulnerability Management

More Problems for Fortinet: Critical FortiSIEM Flaw Exploited

A critical command injection vulnerability (CVE-2025-64155) in FortiSIEM is being actively exploited, allowing unauthenticated attackers remote code execution.

Read more
AI NewsCybersecurityFraud

Microsoft Disrupts RedVDS Cybercrime Service Linked to $40 Million in Fraud

Microsoft successfully disrupted RedVDS, a crimeware subscription service enabling phishing and BEC fraud, resulting in approximately $40 million in U.S. losses and impacting 191,000 organizations.

Read more
AI NewsCybersecurityAI Risk

Model Security Is the Wrong Frame – The Real Risk Is Workflow Security

AI security risks are shifting from models to workflows, highlighted by data theft from 900,000 users via malicious extensions and prompt injection attacks.

Read more
AI NewsCybersecuritySpyware

Predator Spyware Sample Indicates 'Vendor-Controlled' C2

Jamf research reveals Predator spyware reports deployment errors to its C2, suggesting Intellexa has greater control than previously acknowledged.

Read more
AI NewsCybersecurityNetwork Security

Palo Alto Fixes GlobalProtect DoS Flaw That Can Crash Firewalls Without Login

Palo Alto Networks patched CVE-2026-0227, a critical GlobalProtect vulnerability allowing unauthenticated DoS attacks that force firewalls into maintenance mode.

Read more
AI NewsCybersecurityPrompt Injection

Reprompt Attack Enables Single-Click Data Exfiltration From Microsoft Copilot

Researchers revealed a Reprompt attack allowing single-click data exfiltration from Microsoft Copilot, bypassing enterprise security controls.

Read more
AI NewsCybersecurityThreat Intelligence

AI-Powered Voice Cloning Bypass and Telecom Security Concerns Dominate This Week’s Threats

This week’s security bulletin highlights a new AI voice cloning evasion technique, a $26M crypto hack, and increased scrutiny of telecom security practices.

Read more