A severe security flaw in Ivanti Endpoint Manager Mobile (EPMM) allows authenticated attackers to execute arbitrary code remotely on vulnerable systems. The vulnerability, tracked as CVE-2023-35078, affects multiple EPMM versions and poses significant risks to enterprise mobile device management inf
Security researchers have successfully jailbroken Anthropic’s latest Claude Fable 5 AI model, bypassing its safety mechanisms to generate functional stack-based buffer overflow exploits. The jailbreak demonstrates critical weaknesses in AI alignment techniques and raises concerns about large languag
The Langflow AI development platform is under active attack due to a critical path traversal vulnerability (CVE-2024-52304) that allows unauthenticated attackers to read arbitrary files from affected systems. Tracked with a CVSS score of 7.5, this flaw enables threat actors to exfiltrate sensitive c
CrowdStrike has joined the OpenID Foundation and IDPro (Identity Professional Association), strengthening its commitment to identity security standards and industry collaboration. This strategic move positions the cybersecurity giant to influence identity protocols, share threat intelligence, and co
Logitech has launched an $80 foldable Bluetooth mouse targeting mobile professionals who avoid carrying traditional mice. While the device offers portability and convenience, Bluetooth peripherals continue to present security considerations including keystroke injection vulnerabilities, device spoof
The FBI has dismantled multiple fraudulent consulting websites operated by Chinese threat actors specifically designed to target U.S. security clearance holders. These sophisticated honeypot operations posed as legitimate recruitment and consulting firms to identify, profile, and potentially comprom
A China-linked botnet known as JDY has expanded its operational capacity to over 1,500 compromised devices, primarily targeting vulnerable IoT equipment and networking hardware. The botnet’s infrastructure is being leveraged for large-scale cyber reconnaissance activities, credential harvesting, and
OpenAI has disrupted a suspected Chinese influence operation that leveraged ChatGPT to generate content aimed at stirring public debate about data center infrastructure. The campaign, identified as “SweetSpecter,” used AI-generated articles, social media posts, and comments to amplify narratives abo
The complete source code for the notorious Miasma worm was temporarily exposed on GitHub before being taken down. This self-propagating malware, known for its sophisticated evasion techniques and modular architecture, had its operational secrets revealed to the public for several hours. The leak pos
A critical privilege escalation vulnerability (ZDI-26-328) has been discovered in ASUS MyASUS software, allowing local attackers to gain SYSTEM-level privileges through an origin validation error. The flaw affects millions of ASUS device users worldwide who have the pre-installed utility software ru