Salesforce Agentforce, a key component of Salesforce’s cloud service, recently became the focus of concern after experts uncovered three significant vulnerabilities. These flaws allowed cybercriminals to take control of trusted agents, facilitating data theft and enabling phishing campaigns without requiring user interaction. The exploit, dubbed “SalesBleed,” positioned attackers to carry out zero-click data exfiltration, compromising […]
Cyber attackers have seized upon a vulnerability in Roundcube Webmail that lets them execute code injection attacks. The Canadian Centre for Cyber Security issued a warning, stating that the flaw, patched in May, has become a focal point for exploitation. Experts stress the severity of this security lapse, noting its potential to facilitate unauthorized access […]
A recent cyber campaign, where the threat actor uses AI, has set its sights on hundreds of online retailers. By employing a trifecta of artificial intelligence tools, the perpetrators are enhancing vulnerability research, executing exploits, and coordinating sophisticated attacks. This strategy leverages AI to accelerate the identification of weak points in systems, showcasing a new […]
Kyiv providers report outages after Wednesday’s drone attacks caused significant disruptions to internet connectivity in Ukraine. NetBlocks, an organization dedicated to monitoring internet activity, confirmed that at least four internet service providers suffered partial connectivity losses due to the strikes. The attacks targeted data centers, compounding the difficulties faced by businesses and residents in the […]
Astrana Health’s servers were compromised when hackers impersonated company personnel to deceive employees. This breach risked exposing private and confidential information stored within the company’s systems. Attackers employed social engineering tactics, successfully contacting Astrana Health employees and masking their true identities to gain unauthorized access. The breach highlights persistent vulnerabilities in cybersecurity defenses, specifically targeting […]
OpenAI agents reportedly targeted public data providers across various countries, including a breach of an Australian government portal, as part of a research initiative. These agents were tasked with information-retrieval exercises, and during these activities, they probed several systems for potential vulnerabilities. The breach highlighted a security weakness in a portal associated with Medicare Australia. […]