A critical vulnerability dubbed “SearchLeak” has been discovered in Microsoft’s Copilot AI assistant that allows attackers to exfiltrate sensitive data through a single-click exploit. By manipulating Copilot’s search integration features, malicious actors can craft prompts that extract confidential
North Korean state-sponsored threat actors are exploiting the trust developers place in their development tools by weaponizing legitimate software packages and IDE extensions. These campaigns transform everyday coding utilities into malware delivery mechanisms, targeting software developers globally
The UK government is proposing legislation to ban social media access for children under 16, potentially including enforced overnight curfews on platform usage. This regulatory shift represents one of the most aggressive approaches to youth digital safety globally, raising critical questions about a
A critical vulnerability in SimpleHelp remote support software allows unauthenticated attackers to create rogue administrator accounts, potentially granting complete control over remote support infrastructure. The flaw affects versions prior to 5.5.6 and has been assigned CVE-2024-57726 with a CVSS
Nvidia plans to raise over $25 billion through its first bond offering since 2021, marking a significant corporate finance move for the world’s leading AI chip manufacturer. While primarily a financial maneuver, this massive capital raise has downstream cybersecurity implications for critical infras
Mackay Sugar, one of Australia’s largest sugar producers, has publicly disclosed a cyberattack that disrupted its operations. The company confirmed unauthorized access to its IT systems and has engaged cybersecurity experts while working with law enforcement. The incident highlights the ongoing thre
Two decades after Apple’s historic transition to Intel processors in 2006, the company has come full circle by moving to its own Apple Silicon chips. This journey reveals a fascinating evolution in hardware security architecture, from the limited protections of PowerPC Macs through Intel’s x86 vulne
The popular OptinMonster WordPress plugin, used by over 1 million websites, was compromised through a supply-chain attack targeting its CDN infrastructure. Attackers injected malicious JavaScript code that redirected legitimate website visitors to fraudulent sites and phishing pages. The breach high
A critical vulnerability chain in LiteLLM, a popular open-source AI gateway and proxy server, allows authenticated users with minimal privileges to escalate permissions and gain complete administrative control. The flaw exploits improper access controls in the role management system, enabling attack
Cisco has released emergency patches for a critical zero-day vulnerability (CVE-2025-20132) in its SD-WAN vManage software that attackers are actively exploiting. The flaw allows unauthenticated remote code execution with root privileges on affected systems. Organizations running Cisco SD-WAN deploy