Hackers are expanding information theft beyond saved passwords, targeting authentication tokens and session data stored by ChatGPT, Claude, Codex, and…
Category: Cyber Security News
Hackers Use OpenAI Codex Jailbreak Toolkit That Secretly Injects Ads Into AI Responses
A jailbreak toolkit targeting OpenAI Codex is doing more than trying to bypass AI safety rules. The Chinese-language package, called Haiou, changes the…
Hackers Use Stolen Microsoft Entra ID and Azure DevOps Credentials to Access 27 Organizations
Hackers are abusing stolen Microsoft Entra ID application credentials and Azure DevOps identities to access Microsoft 365 and Azure environments, reaching…
Hackers Launch LLMHijacking Attacks, Leaving Companies With $1 Million in Cloud Bills
Hackers are stealing access to corporate large language models and reselling it, leaving victims with cloud bills reaching $1 million. Mandiant…
Hackers Hijacked French Blood Plasma Freezers, Changing Temperature Settings From −30°C to 110°C
Hackers reportedly changed temperature settings on refrigeration equipment used by the French Blood Establishment, EFS, from around −30°C to 110°C after…
North Korean Hackers Abuse Internal AI Tool and Fake Job Interviews in $6.34 Billion Binance Heist
North Korean hackers used a fake job interview, a poisoned coding task, and a hijacked internal AI tool to reach Binance’s wallet systems. The FBI says…
OpenAI Builds Pando Git Infrastructure Using AI Agents and Deploys Continuous Security Testing
OpenAI has built Pando, a new Git backend, with Codex agents in just 10 weeks, replacing the system behind its main shared code repository without…
Password Manager mSecure Urges Users to Secure Logins and Confidential Data Stored
Password manager mSecure has urged current and former customers to immediately protect passwords and other confidential information stored in its…
Hackers Target Supermarket Refrigeration Systems Across Europe, Raising Freezer Temperatures to 50°C
Hackers have targeted supermarket refrigeration systems across at least 10 European countries, forcing retailers to remove chilled and frozen food from…
Hackers Use AI Agents to Launch 3AM Ransomware Attacks Against UK School Networks
A ransomware affiliate has hit a group of UK schools with a mix of human control and AI-style automation. The attackers used built-in Windows tools,…
Hackers Hijack Emergency Alert Apps in Ukraine and Russia to Send Fake Nuclear Attack Warnings
Hackers targeted emergency alert apps in Ukraine and Russia late on November 1 and into November 2, sending false warnings about radiation, chemical…
Hackers Use ARTEX AI to Automate Enterprise Attacks at Machine Speed – Insights for Defenders
AI-powered offensive frameworks are helping attackers move from stolen credentials to cloud privilege escalation, lateral movement, and data theft in…
Renault Car’s 15-Year-Old Linux Navigation Software Hacked to Execute Arbitrary Root Commands
A security researcher has found a way to run any command with root rights on the navigation unit in a 2014 Renault Latitude. The unit is a TomTom Carminat…
ARES AI Red Team Platform Automates 66 Attack Modules for Active Directory and Cloud Security Testing
A new open-core project called ARES is giving red teams a way to run planned, controlled attack tests against Active Directory and cloud systems. A…
NCSC Warns AI Could Accelerate Ransomware Attacks on Critical Infrastructure
The UK’s National Cyber Security Center handled 80 nationally significant cyber incidents during its latest reporting year, warning that artificial…
Microsoft Reveals 78% of Exploited Vulnerabilities Enable System Takeover and Privilege Escalation
Microsoft’s new research shows that attackers pick flaws that give them control of a system. About 78% of vulnerabilities exploited in real attacks let an…
Hackers Abuse Signed ChatGPT and Claude Applications to Deploy Yoba Malware and Evade Detection
Hackers are distributing Yoba malware through fake ChatGPT and Claude downloads, pairing legitimate, digitally signed applications with malicious…
Hackers Hijacked Linux Hosting Server Security Tool cPGuard and Used It as a Backdoor
An unidentified attacker compromised the update channel for cPGuard, a security tool used on Linux hosting servers, to distribute a malicious script that…
Hackers Exploit Adobe Commerce Zero-Day to Deploy PSK Agent RAT and Remotely Control Servers
Attackers are abusing a serious flaw in Adobe Commerce and Magento to install a hidden remote access tool called PSK Agent on online store servers. Once…
CrowdStrike and Deloitte Expand AI Security Partnership to Transform How Enterprises Detect Cyber Threats
CrowdStrike and Deloitte have expanded their cybersecurity partnership to connect business risk decisions with threat detection and response. Announced on…