Google has launched a new account recovery feature that uses selfie video authentication to help users regain access to locked accounts. This article has been indexed from CyberMaterial Read the original article: Google adds selfie video authentication
Category: EN
EU AI Act Deadline Approaching
The European Union’s AI Act is nearing its enforcement deadline, prompting organizations to evaluate their readiness for new artificial intelligence security requirements. This article has been indexed from CyberMaterial Read the original article: EU AI Act Deadline Approaching
Security teams shift from AI-only to hybrid penetration test
Security teams are rapidly retreating from fully automated AI penetration testing after a year of disappointing results. This article has been indexed from CyberMaterial Read the original article: Security teams shift from AI-only to hybrid penetration test
New TriBack Loader Evades EDR Using Signed Binaries and Win32 Callback APIs
A new shellcode loader, dubbed “TriBack Loader,” to a China-nexus intrusion cluster tracked as JadeProx, with the malware explicitly engineered to evade modern EDR by abusing signed binaries and uncommon Win32 callback APIs. Across at least four observed variants, the…
TrickBot Turns Ordinary DNS Traffic Into a Hidden Channel for Malware Commands
TrickBot has quietly evolved into a more covert threat by turning everyday DNS traffic into a stealth channel for malware commands, making its activity harder to spot on busy enterprise networks. In a recent campaign, a new variant was seen…
Microsoft Defender for Office 365 Adds New Prompt Injection Protection
Microsoft has introduced a new capability in Defender for Office 365 to protect against prompt injection attacks, which target AI-powered email workflows, such as Microsoft 365 Copilot. This update reflects the evolving threat landscape, where attackers increasingly attempt to manipulate…
Ubuntu snap-confine Race Condition Enables Local Privilege Escalation to Root
Ubuntu systems are at risk from a new local privilege escalation vulnerability in snap-confine, which could enable any local user to gain full root access on certain desktop installations. Qualys researchers discovered a race condition in snap-confine, the helper program…
Google Launches CodeMender AI Agent to Find, Validate, and Patch Vulnerabilities
Google has introduced CodeMender, a new AI-powered code security agent designed to find, validate automatically, and patch vulnerabilities at machine speed, as organizations face a surge in AI-driven cyber threats targeting software supply chains. The launch marks a shift from…
New Dolphin X Malware Steals Credentials From 300+ Apps and Profiles Victims With AI
A newly identified Windows malware called Dolphin X is raising concerns because it can steal far more than browser passwords. The tool is marketed to criminals as both an information stealer and a remote access trojan, giving operators a broad…
Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models
SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot. The post Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models appeared first on SecurityWeek. This article has been indexed…
Cobalt adds Autonomous Pentest to scale application security testing
Cobalt has introduced Cobalt Autonomous Pentest, a new offering that enables continuous offensive security across an organization’s application portfolio by delivering actionable penetration testing results in as little as 24 hours. AI-assisted development enables organizations to ship software faster than…
Google Released Gemini 3.5 Flash Cyber AI, a Specialized AI Model for Vulnerability Hunting
Google DeepMind unveiled Gemini 3.5 Flash Cyber, an AI model for vulnerability discovery and patching, available only to governments and trusted partners. Google DeepMind announced Gemini 3.5 Flash Cyber on Tuesday, a security-focused AI model built on top of the…
If you get knocked on the head and get all your devices stolen and have amnesia, Google will let you back in with a selfie
You’ll need to be able to move your head side to side to make sure you’re not a deepfake This article has been indexed from www.theregister.com – Articles Read the original article: If you get knocked on the head and…
Google Adds Selfie Video Recovery for Users Locked Out of Their Accounts
Google on Thursday announced a new way for users to sign-in to their accounts by letting them take a selfie video. The selfie for sign-in, per the tech giant, is another option on top of existing recovery methods to log…
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed to target cPanel and WebHost Manager (WHM) instances. The activity involves malicious Packagist development versions spanning 10 packages associated with…
How Synthetic Identity Fraud is Coming for Machine Identities
Most people understand identity theft as an attacker stealing a real person’s sensitive information and impersonating them. Synthetic identity fraud is much harder to catch. Instead of stealing a real identity, the attacker manufactures a new one, frankensteining together several…
WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw
HermeticReader is a now-patched vulnerability in Adobe’s popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. This article has been indexed from Malwarebytes Read the original article: WhatsApp Web chats exposed by Adobe’s Acrobat…
Millions of cars could be tracked and unlocked by a hidden security flaw
A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don’t know they have one. This article has been indexed from Malwarebytes Read the original article: Millions of cars could be…
Swiss train maker tells ransomware crooks to get off at the next stop
Stadler refuses $12.3 demand after thieves swipe technical data through supplier platform This article has been indexed from www.theregister.com – Articles Read the original article: Swiss train maker tells ransomware crooks to get off at the next stop
OpenAI behind Hugging Face hack, TrickBot tunnels through DNS, Acrobat extension opens WhatsApp
OpenAI behind Hugging Face hack TrickBot tunnels through DNS Acrobat extension opens WhatsApp Get the show notes here: Huge thanks to our sponsor, QuilrAI AI agents don’t ask permission. They act — moving data, triggering workflows, changing systems. QuilrAI is…