A wave of counterfeit AI-powered browser extensions has silently breached over 20,000 enterprise environments, compromising the chat histories of employees who routinely used AI tools for work. These malicious Chromium-based extensions disguised themselves as legitimate AI assistant tools and accumulated…
Category: EN
Hikvision Multiple Products Vulnerability Allows Malicious Users to Escalate Privileges
A severe vulnerability affecting multiple Hikvision products was added to the Known Exploited Vulnerabilities (KEV) catalog on March 5, 2026. Tracked globally under CVE-2017-7921, this security flaw poses a significant risk to organizations that rely on these popular surveillance systems.…
Critical ExifTool Flaw Lets Malicious Images Trigger Code Execution on macOS
A newly discovered vulnerability is challenging the long-held belief that macOS systems are inherently immune to malware. Security researchers from Kaspersky’s Global Research and Analysis Team (GReAT) have identified a critical flaw that allows threat actors to execute malicious code…
A week in security (March 2 – March 8)
A list of topics we covered in the week of March 2 to March 8 of 2026 The post A week in security (March 2 – March 8) appeared first on Security Boulevard. This article has been indexed from Security…
7 Most Influential Women in Cybersecurity You Should Follow in 2026
On April 18, 2016, the US Department of Defense did something it had never done in its history. It invited hackers in. 13 minutes after […] The post 7 Most Influential Women in Cybersecurity You Should Follow in 2026 appeared…
Oracle To Cut Thousands Of Jobs Amid AI Cash Crunch
Oracle could begin implementing wide-ranging job cuts this month as it spends heavily on AI bet, report says This article has been indexed from Silicon UK Read the original article: Oracle To Cut Thousands Of Jobs Amid AI Cash Crunch
London Officials Plan Data Centre Policy Amid Backlash
London City Hall officials confirm government is planning specific policy around data centres to address power, water concerns This article has been indexed from Silicon UK Read the original article: London Officials Plan Data Centre Policy Amid Backlash
Anthropic Claude Opus AI model discovers 22 Firefox bugs
Anthropic used Claude Opus 4.6 to identify 22 Firefox vulnerabilities, most of which were high severity, all of which were fixed in Firefox 148, released in January 2026. Anthropic discovered 22 security vulnerabilities in Firefox using its Claude Opus 4.6…
A week in security (March 2 – March 8)
A list of topics we covered in the week of March 2 to March 8 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (March 2 – March 8)
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure
High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign. The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been…
Nginx UI Vulnerabilities Let Attackers Download Full System Backups
A critical security flaw has been discovered in Nginx UI that allows unauthenticated threat actors to download and decrypt complete system backups. Tracked as CVE-2026-27944, this vulnerability carries a maximum critical severity score of 9.8 out of 10. The flaw…
Decoding silence: How deaf and hard-of-hearing pros are breaking into cybersecurity
Stu Hirst was already a CISO when he started to go deaf. It was 2023, and the hearing loss crept in over months, enough for him to adapt, to lean on hearing aids and captions, to quietly reorganize his calendar…
FBI network breach, GitHub distributes stealer, Hackers abuse .arpa
FBI investigates suspicious activities on agency network Over 100 GitHub repositories distributing BoryptGrab stealer Hackers abuse .arpa DNS and ipv6 to evade phishing defenses Get links to all the stories in our show notes: https://cisoseries.com/cybersecurity-news-fbi-network-breach-github-distributes-stealer-hackers-abuse-arpa/ Huge thanks to our sponsor,…
Infostealers: What They Are, How They Work, and How to Stop Them
Infostealers are a growing threat that quietly steal your personal data. These malware programs target everyday users by grabbing login credentials and sensitive info from… The post Infostealers: What They Are, How They Work, and How to Stop Them appeared…
Hikvision Multiple Product Vulnerability Could Let Attackers Escalate Privileges
The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security flaw affecting multiple Hikvision products to its Known Exploited Vulnerabilities (KEV) catalog. This urgent addition, made on March 5, 2026, serves as a stark warning to network…
ExifTool Vulnerability Lets Malicious Images Trigger macOS Code Execution
ExifTool is a ubiquitous open-source solution for reading, writing, and editing image metadata. It’s the go-to tool for photographers and digital archivists, and is widely used in data analytics, digital forensics, and investigative journalism. Can a computer really get infected…
DumpBrowserSecrets – Browser Credential Harvesting with App-Bound Encryption Bypass
DumpBrowserSecrets extracts saved passwords, cookies, OAuth tokens and autofill data from Chrome, Edge, Firefox, Opera and Vivaldi, bypassing App-Bound Encryption via Early Bird APC injection. This article has been indexed from Darknet – Hacking Tools, Hacker News & Cyber Security…
TrendAI™ at [un]prompted 2026: From KYC Exploits to Agentic Defense
At [un]prompted 2026, TrendAI™ demonstrated how documents can be used to exploit AI-driven KYC pipelines and introduced FENRIR, an automated system for discovering AI vulnerabilities at scale. This article has been indexed from Trend Micro Research, News and Perspectives Read…
Open-source tool Sage puts a security layer between AI agents and the OS
Autonomous AI agents running on developer workstations execute shell commands, fetch URLs, and write files with little or no inspection of what they are doing. Open-source project Sage inserts an interception layer between an AI agent and those operations, checking…
Turning expertise into opportunity for women in cybersecurity
Speaker diversity in cybersecurity has been a talking point for over a decade, with panels, pledges, and dedicated conference tracks failing to produce change. Stages still skew heavily male, even as women represent millions of qualified professionals in the field.…