Cybersecurity

AI Browsers Face Unsolvable Prompt Attack Risk

OpenAI details ongoing challenges with prompt injection attacks on AI browsers, emphasizing the need for robust security measures and user vigilance.

Fake AI Chat Results Spread Dangerous Mac Malware

Mac malware campaign uses fake AI chat results to deliver AMOS through terminal commands, security researchers report. Attackers exploit trust in AI-generated cleanup guides.

IBM API Connect Flaw: Critical Authentication Bypass Risk

IBM urges immediate patching for a critical vulnerability in its API Connect platform, which could allow unauthorized remote attackers to bypass authentication and gain access.

Strengthening Cybersecurity Through Data-Driven Collaboration

Explore how data-driven collaboration strengthens cybersecurity defenses, addressing data quality and consistency challenges to foster more resilient partnerships.

React2Shell: Unpacking a Critical Web Vulnerability

A critical remote code execution flaw, React2Shell, in the React 19 library created significant challenges for web application security.

Combating AI-Powered Ransomware: The Shift to Distributed Security

Ransomware attacks in 2025 have caused business operations to cease for weeks and months at a time, resulting in massive financial losses in organizations around the globe.

Cybersecurity's New Focus: Skills Over Staffing in AI Era

A new study reveals cybersecurity teams are shifting their focus from headcount shortages to critical skill gaps, particularly with AI, increasing breach risks.

GitHub Action Secrets Vulnerable to Token Exploitation

New research reveals that exposed GitHub Personal Access Tokens are providing attackers with a direct path into enterprise cloud environments.

AI Memory Management: The Database Imperative

Effective management of AI agent memory is crucial for enterprise security and operational integrity, requiring a shift from temporary storage to robust database practices.

Chinese Cyberspies Target VMware vSphere with Advanced Malware

Chinese state-sponsored threat actors are employing a sophisticated Go-based malware, BRICKSTORM, to establish long-term persistence in VMware vCenter and ESXi servers.

Strengthening Defenses Against npm Supply Chain Attacks

Explore advanced strategies for defending against npm supply chain attacks, focusing on YARA rule integration and proactive security measures in development workflows.

Vast Password Leak Exposes Billions of Credentials

A recent discovery by threat intelligence firm Synthient reveals an unprecedented exposure of 1.3 billion unique passwords and 2 billion email addresses, underscoring urgent security measures.

Critical Flaws in Fluent Bit Expose Cloud Infrastructure

Five critical vulnerabilities in Fluent Bit, a widely used log processor, could lead to full cloud takeover, data manipulation, and remote code execution.

Cloud Ransomware Shifts Focus to AWS S3 Buckets

Ransomware operators are increasingly targeting Amazon Web Services S3 buckets, exploiting cloud-native encryption and key management services to disrupt organizations.

Azure Blocks Record DDoS Attack as IoT Botnets Grow Stronger

Microsoft's Azure platform successfully mitigated its largest distributed denial-of-service attack to date, a 15.72 Tbps strike targeting an Australian cloud endpoint.

AI Frameworks Hit by Copy-Paste Code Vulnerabilities

Cybersecurity researchers have uncovered critical remote code execution vulnerabilities in AI inference server frameworks from Meta, Nvidia, and Microsoft.

Universities Hit by Sophisticated Payroll Phishing Scams

Microsoft details Storm-2657 cybercriminals' phishing campaign, targeting thousands at universities to steal payroll credentials and divert funds.

Securing Software in the Era of AI-Generated Code

The accelerating pace of cloud-native development and the rise of AI-generated code are creating unprecedented cybersecurity challenges for organizations.

Discord Breach Exposes User IDs Via Third-Party Vendor

Discord confirms a security incident involving a third-party vendor led to the exposure of user IDs, names, emails, and limited billing data.

ChatGPT Flaw Exposed Gmail Data via Invisible Prompts

A recently patched ShadowLeak vulnerability allowed hackers to weaponize ChatGPT's Deep Research agent, stealing personal data from Gmail accounts through hidden commands.

Security Flaws in VS Extensions Expose Developers to Threats

Developers publishing Visual Studio extensions to open marketplaces have inadvertently exposed sensitive access tokens, creating significant security vulnerabilities exploited by threat actors.

Securing AI Agents: Navigating New Frontiers of Risk

Autonomous AI agents introduce unprecedented cybersecurity challenges, shifting focus from static assets to dynamic, self-evolving systems. Organizations face new vulnerabilities, including black box attacks, prompt injection, and rogue agents, demanding a proactive Zero Trust AI approach.