Security researchers have disclosed ChatGPhish, a novel attack technique that exploits ChatGPT’s web browsing and content summarization features to conduct sophisticated phishing campaigns. By manipulating webpage content that ChatGPT accesses and summarizes, attackers can inject malicious instructi
A robotics startup is offering free professional home cleaning services in exchange for permission to record every moment of the cleaning process—including video, audio, and sensor data—to train AI models. This arrangement raises serious privacy concerns, creates potential data breach vectors, and e
Palo Alto Networks’ GlobalProtect VPN is being actively exploited through CVE-2026-0257, a critical authentication bypass vulnerability with a CVSS score of 9.3. Rapid7 has confirmed in-the-wild exploitation targeting vulnerable PAN-OS firewalls. Attackers can gain unauthorized network access withou
Microsoft has been recognized as a Leader in the 2026 Gartner Magic Quadrant for Endpoint Protection Platforms, reinforcing its position in the enterprise security market. The recognition highlights Microsoft Defender for Endpoint’s comprehensive threat protection capabilities, integration ecosystem
The Gentlemen ransomware leverages Windows SYSTEM-level scheduled tasks to execute encryption operations with the highest privileges available on compromised machines. By creating tasks that run under the NT AUTHORITY\SYSTEM account, this ransomware strain ensures unfettered access to all local driv
A federal audit has exposed serious operational failures at NIST’s National Vulnerability Database (NVD), revealing a staggering backlog of 27,000 unprocessed security vulnerabilities. The investigation uncovered systematic issues including inadequate resource planning, excessive duplication of effo
Threat actors are leveraging Large Language Model (LLM) agents to automate post-exploitation activities after successfully compromising systems through CVE-2026-39987, a critical vulnerability in Marimo, a popular Python notebook framework. This novel attack chain represents a significant evolution
23andMe is facing a major lawsuit following allegations that the genetic testing company attempted to conceal a significant data breach exposing sensitive DNA and ancestry information of millions of users. The lawsuit claims 23andMe failed to promptly disclose the breach, implement adequate security
Distributed Denial of Service (DDoS) attacks have become commoditized through DDoS-as-a-Service (DDoSaaS) platforms, with attacks now available for as little as $5. These services operate like legitimate SaaS businesses, offering subscription tiers, customer support, and user-friendly interfaces. Po
Dutch law enforcement, in collaboration with international partners, has successfully disrupted one of the largest botnets ever recorded, comprising approximately 17 million infected devices worldwide. The operation targeted malware infrastructure that had compromised routers, IoT devices, and netwo