A newly identified cybercrime group dubbed “Pink” is conducting sophisticated vishing (voice phishing) campaigns targeting Microsoft 365 users to steal sensitive cloud data. The group employs social engineering tactics through phone calls, impersonating IT support staff to trick victims into grantin
OpenAI has introduced Lockdown Mode for ChatGPT, a new security feature designed to defend against prompt injection and data exfiltration attacks. This opt-in mode restricts the AI’s ability to process external content, click links, and execute certain commands that attackers exploit to manipulate m
Anthropic has deployed engineering staff to support the National Security Agency’s (NSA) use of its “Mythos” AI platform for cyber operations. This unprecedented collaboration marks a significant shift in public-private AI partnerships within the intelligence community, raising questions about dual-
OpenAI has introduced Lockdown Mode for ChatGPT, a new security feature designed to prevent data exfiltration attempts through the AI chatbot. This mode restricts potentially risky tools and capabilities that could be exploited to steal sensitive information from user conversations. The feature allo
Free streaming apps available on popular smart TV platforms are secretly converting millions of devices into residential proxy networks used for AI data scraping operations. These applications, marketed as free entertainment solutions, embed software development kits (SDKs) that route third-party we
An AI-powered fuzzing agent has uncovered 21 previously unknown zero-day vulnerabilities in FFmpeg, the ubiquitous multimedia processing library used by billions of devices worldwide. This discovery marks a significant milestone in automated vulnerability research, demonstrating AI’s capability to i
A sophisticated supply chain attack has compromised 32 Red Hat packages after attackers gained control of a maintainer’s GitHub account. The Miasma malware, embedded within these packages, poses significant risks to Red Hat Enterprise Linux (RHEL) and Fedora users. The malicious code was designed to
Threat actors are increasingly abusing legitimate system administration and software deployment tools to deliver malware while evading detection. By leveraging trusted binaries like PowerShell, Windows Management Instrumentation (WMI), and legitimate remote access software, attackers bypass traditio
A critical zero-day vulnerability in a widely deployed smart speaker allows attackers to gain remote code execution through wireless exploitation without user interaction. The flaw affects the device’s Wi-Fi chipset implementation, enabling attackers within wireless range to compromise the speaker a
Cybercriminals have evolved beyond digital-only extortion schemes, with threat actors now physically appearing at victims’ homes and businesses carrying USB drives containing stolen data as proof of compromise. This hybrid physical-digital attack vector represents a dangerous escalation in extortion