More than 40,000 internet-connected security cameras have been found exposed online, raising concerns over potential espionage, data breaches and privacy violations, according to a report from SC World. The vulnerable devices, lacking adequate protection, could allow unauthorized parties to monitor sensitive areas including data centers, corporate offices, retail locations and private homes. The exposure of […]
Fog ransomware operators are deploying an unusual combination of spyware, pentesting tools, and legitimate software in their latest cyberattacks, raising concerns among security analysts. The attackers leverage open-source penetration testing utilities alongside Syteca, a legitimate employee monitoring software, to infiltrate and control targeted systems. This blend of authorized and unauthorized tools complicates detection efforts, allowing […]
Criminal networks are exploiting encrypted messaging platforms to expand a disturbing underground industry known as violence-as-a-service. Authorities have reported that these groups use secure apps to recruit teenagers as hitmen, luring them with promises of quick money and anonymity. The trend has raised serious concerns among cybersecurity experts and law enforcement agencies across multiple countries. […]
Security researchers at Cato Networks have demonstrated how Jira tickets used in internal workflows can become attack vectors through prompt injection exploits. The proof-of-concept attack, dubbed “living off AI,” reveals how external inputs can manipulate AI-driven systems that interface with enterprise applications. The attack leverages seemingly benign content embedded in Jira tickets, which AI tools […]
The U.S. Cybersecurity and Infrastructure Security Agency has issued an alert about a security flaw affecting several outdated TP-Link router models. The vulnerability is currently being exploited in the wild, increasing the risk for organizations that still rely on the discontinued devices. CISA Warns TPLink Router users to take immediate action to protect their networks […]
A cyber-espionage campaign with ties to China has deployed a new backdoor dubbed ShortLeash, using fraudulent digital certificates to evade detection. The campaign, identified as “LapDogs,” has targeted specific organizations by embedding the malware within seemingly legitimate software updates. Analysts say China hackers spoof certs to disguise malicious payloads and gain unauthorized access to systems. […]
Google Offers Imagen 4, its latest text-to-image generation model, for free access exclusively through its AI Studio platform. The company confirmed the rollout of the advanced tool, positioning it as a significant step in making generative AI more accessible to developers and creators. Imagen 4 represents Google’s most sophisticated image synthesis model to date. It […]
Malicious actors have embedded malware within artificial intelligence models uploaded to the Python Package Index (PyPI), with a specific focus on compromising users affiliated with Alibaba’s AI Labs. The attack involves the distribution of seemingly legitimate AI models that, once downloaded, execute hidden malicious code on the target systems. The tactic exploits the growing reliance […]
Hackers are exploiting misconfigured artificial intelligence tools to launch sophisticated cyberattacks by generating malicious AI-powered payloads, according to researchers at Sysdig. These intrusions leverage exposed APIs, unsecured machine learning environments, and open-source platforms like Jupyter and TensorFlow to gain unauthorized access. Once inside, attackers use the compromised AI infrastructure to create dynamic, context-aware malware, phishing […]
Researchers have disclosed critical security flaws in Anthropic’s Model Context Protocol (MCP), highlighting the risk of stealthy exploitation in production environments. According to newly published findings, attackers can execute Full-Schema Poisoning attacks, injecting malicious logic into any schema field within MCP. This vulnerability enables adversaries to manipulate model behavior without detection during development or testing […]
Salesforce has patched five software bugs after a series of issues were reported, the customer relationship management (CRM) provider confirmed. The company said it addressed the vulnerabilities internally and emphasized that the remaining 16 reported concerns were the result of customer-side misconfigurations, not flaws in its platform. The disclosure follows heightened scrutiny of cloud application […]
Microsoft has introduced a new export feature for its Windows Recall tool in Europe, giving users the ability to back up snapshots of their digital activity. The update allows individuals to manage and preserve their Recall data more securely, addressing privacy concerns tied to the tool’s automatic screen capture function. Microsoft Adds Export Tool aims […]