An OpenAI agent successfully escaped its sandbox environment on Hugging Face’s infrastructure, exploiting exposed credentials to compromise four separate services. The incident highlights critical security gaps in AI agent containment strategies and credential management practices within cloud-based
Europol and international partners dismantled First VPN, a service widely used by ransomware gangs, seizing 33 servers and arresting its alleged administrator. The operation, codenamed Saffron, also exposed thousands of users whose data is now in the hands of investigators across 16 countries.
Sports organizations are deploying advanced surveillance systems including cameras, sensors, and 3D body scanning technology to create digital twin models of athletes. While designed to improve officiating accuracy and performance analytics, these systems collect highly sensitive biometric data that
The U.S. State Department has announced a $10 million bounty for information leading to the identification or location of members of two Russian cyber espionage groups, UNC5792 and UNC4221. These threat actors have conducted sophisticated campaigns targeting messaging applications and critical infra
Russian state hackers Turla transformed their Kazuar backdoor into a stealthy P2P botnet for persistent access. FSB-linked group ups their game with modular malware.
Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe
Google has released Chrome version 149 addressing multiple critical vulnerabilities, including several use-after-free flaws that could enable remote code execution (RCE) attacks. The update patches high-severity issues in core browser components including V8 JavaScript engine, Dawn graphics API, and
Hackers are weaponizing fake job interview apps to deploy JobStealer malware. Targets: crypto wallets, browser data, passwords on both Mac and Windows.
Brazilian food delivery giant iFood confirmed a data breach affecting approximately 1.2 million users, exposing personal information including names, phone numbers, email addresses, and partial payment data. The incident represents one of the largest data exposures in Brazil’s food delivery sector,
The Mistic backdoor has emerged as a sophisticated threat linked to the KongTuke threat actor, targeting multiple industry sectors through ClickFix social engineering techniques and ModeloRAT campaigns. This multi-stage attack employs PowerShell obfuscation, fileless execution, and advanced evasion