The C0XMO botnet is actively targeting DD-WRT routers through known vulnerabilities, establishing persistent footholds on compromised devices. Unlike typical botnets, C0XMO actively hunts and terminates competing malware, securing exclusive control over infected systems. The campaign demonstrates so
A school shooting survivor has filed a lawsuit against an AI-powered gun detection company after its security system failed to identify a weapon before a violent incident. The case highlights critical concerns about the reliability of artificial intelligence solutions deployed in high-stakes securit
A newly identified cybercrime group dubbed “Pink” is conducting sophisticated vishing (voice phishing) campaigns targeting Microsoft 365 users to steal sensitive cloud data. The group employs social engineering tactics through phone calls, impersonating IT support staff to trick victims into grantin
OpenAI has introduced Lockdown Mode for ChatGPT, a new security feature designed to defend against prompt injection and data exfiltration attacks. This opt-in mode restricts the AI’s ability to process external content, click links, and execute certain commands that attackers exploit to manipulate m
Anthropic has deployed engineering staff to support the National Security Agency’s (NSA) use of its “Mythos” AI platform for cyber operations. This unprecedented collaboration marks a significant shift in public-private AI partnerships within the intelligence community, raising questions about dual-
OpenAI has introduced Lockdown Mode for ChatGPT, a new security feature designed to prevent data exfiltration attempts through the AI chatbot. This mode restricts potentially risky tools and capabilities that could be exploited to steal sensitive information from user conversations. The feature allo
Free streaming apps available on popular smart TV platforms are secretly converting millions of devices into residential proxy networks used for AI data scraping operations. These applications, marketed as free entertainment solutions, embed software development kits (SDKs) that route third-party we
An AI-powered fuzzing agent has uncovered 21 previously unknown zero-day vulnerabilities in FFmpeg, the ubiquitous multimedia processing library used by billions of devices worldwide. This discovery marks a significant milestone in automated vulnerability research, demonstrating AI’s capability to i
A sophisticated supply chain attack has compromised 32 Red Hat packages after attackers gained control of a maintainer’s GitHub account. The Miasma malware, embedded within these packages, poses significant risks to Red Hat Enterprise Linux (RHEL) and Fedora users. The malicious code was designed to
Threat actors are increasingly abusing legitimate system administration and software deployment tools to deliver malware while evading detection. By leveraging trusted binaries like PowerShell, Windows Management Instrumentation (WMI), and legitimate remote access software, attackers bypass traditio