OWASP has published a groundbreaking AI security report providing security professionals with actionable frameworks, threat models, and defensive strategies for AI/ML systems. The report addresses critical vulnerabilities in Large Language Models (LLMs), machine learning pipelines, and AI infrastruc
Google has released DiffusionGemma, an open-source AI image generation model featuring a 4x performance improvement over its predecessor. While the speed enhancement democratizes AI capabilities, it simultaneously amplifies security risks including adversarial attacks, deepfake generation velocity,
Internal Xbox documents leaked online reveal senior leadership acknowledging a “crisis” within the gaming division, with executives stating “this cannot continue” regarding declining brand perception and market position. The breach exposes strategic vulnerabilities, competitive intelligence, and can
Security researchers have disclosed a sophisticated zero-click exploit chain targeting Google’s Pixel 10 devices that achieves full root access without any user interaction. The attack leverages vulnerabilities in the Pixel’s telephony stack and kernel subsystem, allowing remote code execution throu
Cisco has released emergency patches for a critical zero-day vulnerability (CVE-2025-20132) in its SD-WAN vManage software that attackers are actively exploiting. The flaw allows unauthenticated remote code execution with root privileges on affected systems. Organizations running Cisco SD-WAN deploy
A newly identified threat cluster designated OP-512 has been actively targeting Microsoft Internet Information Services (IIS) servers with a custom-built web shell framework. The sophisticated malware employs advanced evasion techniques, modular architecture, and encrypted command-and-control channe
ShinyHunters, a notorious data extortion group, has exploited zero-day vulnerabilities to breach multiple organizations. Even if you’ve applied recent patches, your systems may have been compromised during the exposure window. Organizations must immediately conduct forensic assessments to determine
A critical SQL injection vulnerability in Ghost CMS is being actively exploited in a widespread ClickFix social engineering campaign. Attackers are compromising Ghost-powered websites to inject malicious scripts that display fake error messages, tricking users into executing PowerShell commands that
Threat actors are increasingly abusing legitimate system administration and software deployment tools to deliver malware while evading detection. By leveraging trusted binaries like PowerShell, Windows Management Instrumentation (WMI), and legitimate remote access software, attackers bypass traditio
CrowdStrike has announced a strategic partnership with NVIDIA to scale AI-native agents across its Falcon Exposure Management platform. This collaboration leverages NVIDIA’s AI computing infrastructure to enhance autonomous threat detection, vulnerability prioritization, and risk assessment capabili