Notorious cybercrime group ShinyHunters is actively exploiting a critical zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft applications, targeting enterprise HR and financial systems worldwide. The authentication bypass flaw allows attackers to gain unauthorized access to sensitive emplo
Sports organizations are deploying advanced surveillance systems including cameras, sensors, and 3D body scanning technology to create digital twin models of athletes. While designed to improve officiating accuracy and performance analytics, these systems collect highly sensitive biometric data that
Microsoft has addressed a critical vulnerability in Surface devices that allowed attackers to permanently brick hardware using a single malicious network packet. The flaw, affecting multiple Surface product lines, could render devices completely inoperable without physical intervention. While Micros
Agentjacking is a novel attack technique that manipulates AI-powered coding assistants into executing malicious commands by exploiting their autonomous code generation and execution capabilities. Attackers inject specially crafted prompts into documentation, configuration files, or project contexts
Agentjacking is a novel attack vector targeting AI-powered coding assistants that autonomously execute code. Attackers inject malicious instructions into documentation, comments, or repositories that AI agents parse during development workflows. When these agents execute suggested code without prope
Google has filed a lawsuit against a Chinese-based cybercriminal network allegedly operating AI-enhanced phishing campaigns at massive scale. The operation targeted Google users worldwide through fraudulent account recovery schemes and fake support services. The threat actors exploited generative AI
Microsoft has addressed a significant bug affecting the Windows Update Standalone Installer (WUSA) that prevented users from successfully installing critical security patches and feature updates. The issue, which caused installation failures across multiple Windows versions, has been resolved throug
Senator Bernie Sanders has proposed creating a federally-managed AI Sovereign Wealth Fund that would acquire equity stakes in artificial intelligence companies in exchange for public resource access. The plan aims to distribute AI profits to American citizens while raising significant questions abou
Plymouth City Council has exposed the personal information of hundreds of families after mistakenly sending an email that revealed recipients’ addresses in the “To” field rather than using blind carbon copy (BCC). The incident represents yet another email handling failure affecting a UK local govern
A critical vulnerability chain in LangGraph, a popular framework for building stateful AI agents, enables attackers to achieve remote code execution (RCE) on self-hosted deployments. The flaw combines insecure deserialization with insufficient input validation, allowing malicious actors to inject ar