AutoJack is a critical vulnerability affecting AI agents that autonomously browse web content. By crafting a malicious webpage with embedded instructions, attackers can achieve remote code execution (RCE) on the host system running the AI agent. This attack exploits the trust boundary between natura
Ukraine’s Security Service (SBU) has exposed a sophisticated SMS phishing campaign orchestrated by Russian intelligence services targeting government officials and critical infrastructure personnel. The operation uses deceptive text messages impersonating legitimate support services to harvest crede
A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Salesforce has disabled the Klue competitive intelligence application from its AppExchange marketplace following reports of OAuth token abuse that potentially exposed sensitive customer data. The incident involved improper handling of authentication tokens, allowing unauthorized access to Salesforce
The FortiBleed vulnerability (CVE-2024-23113) is being actively exploited by INC Ransom and Lynx ransomware groups to steal credentials from vulnerable Fortinet devices. This critical authentication bypass flaw affects FortiOS SSL-VPN and allows attackers to extract session tokens and authentication
Security researchers have discovered that GPS satellites are being used as an unconventional key distribution platform, broadcasting hidden military codes embedded within civilian navigation signals. This covert communication method leverages the ubiquity of GPS infrastructure to distribute cryptogr
A sophisticated Windows exploitation technique leveraging bind links allows attackers to bypass critical security controls including Endpoint Detection and Response (EDR) systems, Anti-Malware Scan Interface (AMSI), AppLocker, and Sysmon monitoring. By manipulating Windows’ native bind link function
Three critical vulnerabilities—Dirty Frag (CVE-2024-56678), Copy Fail (CVE-2024-56677), and Fragnesia (CVE-2024-56676)—expose fundamental weaknesses in Linux kernel memory management. These flaws affect packet fragmentation and copy-on-write mechanisms, potentially allowing local attackers to escala
Cybercriminals are leveraging weaponized LNK files and PowerShell scripts to deliver NarwhalRAT, a remote access trojan capable of extensive system compromise. The attack chain begins with malicious shortcut files that trigger PowerShell commands, ultimately deploying a Python-based loader to establ
Internal Xbox documents leaked online reveal senior leadership acknowledging a “crisis” within the gaming division, with executives stating “this cannot continue” regarding declining brand perception and market position. The breach exposes strategic vulnerabilities, competitive intelligence, and can