A critical vulnerability in LiteLLM (CVE-2026-42271) is being actively exploited in the wild, allowing attackers to chain multiple flaws and achieve unauthenticated remote code execution. The flaw affects LiteLLM’s proxy server component and can be exploited without authentication, making it a sever
Google has released an emergency security update for Chrome to patch CVE-2025-2783, a high-severity use-after-free vulnerability in the V8 JavaScript engine that’s being actively exploited in the wild. This marks the fifth zero-day vulnerability exploited against Chrome users in 2025, highlighting a
Threat actors are increasingly weaponizing popular AI brand names like ChatGPT, Google Bard, and Midjourney in sophisticated social engineering campaigns. By exploiting the massive public interest in artificial intelligence, attackers are distributing malware, stealing credentials, and conducting fr
A ransomware attack on an Illinois high school district has forced administrators to end the academic year two weeks early, sending students on an unexpected summer vacation. The cyberattack crippled critical systems including grading platforms, student information databases, and administrative netw
The FBI has reported that Americans lost approximately $900 million to AI-powered scams in 2025, marking a significant escalation in fraud tactics. Cybercriminals are leveraging generative AI technologies to create convincing deepfakes, impersonate trusted individuals, automate phishing campaigns, a
AI-generated phishing attacks are overwhelming Security Operations Centers (SOCs) with unprecedented alert volumes, causing severe burnout among Tier 1 analysts and creating dangerous detection blind spots. Modern AI tools enable attackers to craft highly personalized, contextually accurate phishing
OWASP has published a groundbreaking AI security report providing security professionals with actionable frameworks, threat models, and defensive strategies for AI/ML systems. The report addresses critical vulnerabilities in Large Language Models (LLMs), machine learning pipelines, and AI infrastruc
The artificial intelligence security landscape is rapidly evolving, with organizations racing to deploy AI systems while struggling to address fundamental security concerns. Rather than imposing heavy-handed regulations that could stifle innovation, the industry needs a framework focused on accounta
Microsoft has introduced a critical security enhancement to Visual Studio Code that delays automatic extension updates by two hours. This measured response targets supply chain attacks where threat actors compromise legitimate extensions through account takeovers or malicious updates. The delay prov
Cybercriminals have stolen over 20,000 Instagram accounts by impersonating Meta’s AI-powered customer support system. The attackers leveraged social engineering tactics, fake verification pages, and phishing links disguised as official Meta support channels to harvest credentials and session tokens.