GitHub Security Lab has disclosed that its open-source AI security agent identified 24 vulnerabilities in Android applications, including flaws that could…
Category: Cyber Security News
Hackers Weaponizing ChatGPT’s Custom GPT Feature to Trick Victims into Installing Malware
Hackers are abusing ChatGPT’s Custom GPT feature to impersonate AI products and trick users into installing a sophisticated remote access trojan (RAT),…
SilverFox Hackers Built Fake Software Sites That Hide Malware From Security Researchers
Fake software download pages are drawing Windows users into a Silver Fox-linked malware campaign. The pages imitate familiar vendors and supply installers…
Hackers Built a Botnet That Doesn’t Just Steal Data, It Burns AI Credits
A Windows botnet called x47.c can spend victims’ paid AI credits, steal data, and flood websites. Its operator markets it as an attack toolkit for remote…
OpenAI Scrapped the New GPT-6.1 Astra Model Following Security Concerns
OpenAI has scrapped the release of GPT-6.1 Astra after internal safety testing exposed troubling failures involving deception, authorization boundaries,…
Hackers Turned Ethereum Into a Secret Messaging System for Malware
A North Korea-linked malware campaign has found a way to keep infected computers connected to its operators. Instead of storing malware on Ethereum, the…
GPT-6 Astra AI Agent Tried to Deceive Developers and Hack Software Supply Chains
The UK AI Security Institute (AISI) recently disclosed that during cybersecurity evaluations, the GPT-6 Astra model executed simulated, unauthorized…
wolfSSL 5.9.4 Fixes 11 TLS Security Flaws and Expands Post-Quantum Cryptography Support
wolfSSL has released version 5.9.4, fixing 11 security vulnerabilities in its embedded TLS and cryptography library while adding major post-quantum…
Modulate Raises $25M to Fight Deepfake Voices With Next-Generation Audio AI
Modulate has secured $25 million in funding to expand its audio-native AI platform as enterprises confront deepfake voice fraud, impersonation, and unsafe…
OpenAI’s AI Agents Went Beyond Their Tasks and Triggered New Security Concerns
OpenAI has acknowledged that one of its experimental AI agents gained unauthorized access to an Australian government health statistics portal during…
AgtaBackup RAT Uses Fake Microsoft Store Pages and RMM Tools to Hijack Windows Systems
A newly tracked Windows remote access trojan called AgtaBackup RAT is using fake Microsoft Store pages to gain a foothold on victims’ computers. The…
Storm-3168 Deletes Azure Resources in 7-Minute Destructive Cloud Attack
Storm-3168 used compromised cloud identities to carry out a destructive attack against an Azure environment in minutes. The operation shows how a stolen…
Critical Apple CoreGraphics Zero-Day Vulnerability Actively Exploited in Attacks
Apple has released iOS 26.7.1 and iPadOS 26.7.1 to fix a critical zero-day vulnerability that it says may have been exploited in an extremely…
Critical WatchGuard API Vulnerabilities Enables Command Execution Attacks
WatchGuard has disclosed three security vulnerabilities affecting WatchGuard AP devices, including two critical flaws that could allow attackers to gain…
BotHelper RAT Uses Encrypted Payloads and Live Screen Surveillance to Spy on Windows Users
A newly documented Windows remote access trojan, dubbed BotHelper RAT, gives attackers a quiet way to watch an infected user’s screen and control the…
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers
A coordinated cluster of 31 Russian-language Chrome extensions that present themselves as convenient “VPN for X” tools while quietly steering browser…
Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data
The Pentagon has confirmed a major data breach involving a Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information…
Microsoft Finds New Malware Used by Hackers to Maintain Secret Access Inside Target Networks
Microsoft Threat Intelligence has uncovered NeedyMantis, a modular post-compromise malware framework designed to preserve covert access inside…
Florida AG Seeks Emergency Injunction to Restrict OpenAI and ChatGPT Over AI Safety Risks
Florida Attorney General James Uthmeier has asked a Highlands County judge to impose sweeping temporary restrictions on OpenAI, CEO Sam Altman, and…
New File Notification Attack Lets Hackers Track User Activity Across Linux, Windows and macOS
A cross-platform side-channel attack that abuses file-notification services to monitor user activity on Linux, Windows and macOS. The technique turns…