The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
OpenAI has disrupted a suspected Chinese influence operation that leveraged ChatGPT to generate content aimed at stirring public debate about data center infrastructure. The campaign, identified as “SweetSpecter,” used AI-generated articles, social media posts, and comments to amplify narratives abo
Google has released DiffusionGemma, an open-source AI image generation model featuring a 4x performance improvement over its predecessor. While the speed enhancement democratizes AI capabilities, it simultaneously amplifies security risks including adversarial attacks, deepfake generation velocity,
Cybercriminals are exploiting TikTok and Instagram Reels to distribute the notorious Vidar infostealer malware. Attackers create seemingly legitimate content promoting fake software, AI tools, and cracked applications that direct users to malicious download sites. Once executed, Vidar harvests sensi
Identity verification has become the cornerstone of digital security, yet many organizations still struggle with implementation. This article outlines five critical best practices: implementing multi-layered authentication, leveraging biometric technologies securely, maintaining continuous verificat
Meta’s recent policy relaxation on hate speech moderation has led to a 300% spike in racist comments targeting politicians and public figures. Security researchers warn that the surge in hostile rhetoric creates a threat landscape where coordinated harassment campaigns flourish, potentially escalati
Anthropic has launched Claude Fable 5, a new AI model available for a limited time period. This specialized model introduces unique capabilities that present both opportunities and security considerations for organizations. Security teams must understand the model’s architecture, assess potential at
Meta has updated its data usage policies to expand how it leverages off-Meta business activity data beyond advertising purposes. The social media giant will now use information about user interactions with third-party businesses—collected through Meta Pixel, Conversions API, and similar tools—to per
OpenClaw, an AI-powered email management agent, has been compromised through phishing attacks, resulting in the exposure of sensitive user data. The incident demonstrates a critical vulnerability in autonomous AI systems that process emails without adequate security controls. Multiple users reported
Meta has updated its data usage policies to explicitly permit the use of off-site business interactions—data collected from third-party websites and apps—to personalize Facebook and Instagram feeds and train its AI systems. Previously limited primarily to advertising purposes, this expansion signifi