A critical vulnerability in Cursor IDE, the rapidly growing AI-powered development environment, enables persistent remote code execution through manipulation of the Model Context Protocol (MCP) system. The vulnerability, tracked as CVE-2025-54136 and dubbed “MCPoison,” exploits a trust validation flaw that…
Over 100 Dell Laptop Models Plagued by Vulnerabilities Impacting Millions
A new Cisco Talos report reveals critical flaws in Dell Latitude and Precision laptops. Find out how hackers can exploit the ControlVault chip to steal sensitive data. This article has been indexed from Hackread – Latest Cybersecurity, Hacking News, Tech,…
Kimsuky APT Uses LNK Files to Deploy Reflective Malware and Evade Windows Defender
The North Korean state-sponsored group Kimsuky, also known as APT43, Thallium, and Velvet Chollima, has been accused of launching a recent cyber-espionage campaign in which the attackers used malicious Windows shortcut (LNK) files as the first point of entry to…
Over 10,000 Malicious TikTok Shop Domains Target Users with Malware and Credential Theft
Cybersecurity firm CTM360 has uncovered an ongoing malicious operation dubbed “ClickTok,” specifically targeting TikTok Shop users worldwide through a dual-pronged strategy of phishing and malware deployment. This campaign leverages deceptive replicas of TikTok’s official in-app e-commerce platform, impersonating affiliates and…
I tested Dell’s XPS successor, and it made my $3,000 Windows laptop look bad
The Dell Premium 16 continues the XPS legacy, combining high-end components with a stunning 4K touchscreen in a sleek, modern design. This article has been indexed from Latest news Read the original article: I tested Dell’s XPS successor, and it…
How Georgia Department of Transportation Is Building Cyber Resilience
GDOT boosts network security and resilience with Palo Alto Networks Next-Gen Firewalls. This investment is for public safety and GA transport’s future. The post How Georgia Department of Transportation Is Building Cyber Resilience appeared first on Palo Alto Networks Blog.…
Study finds humans not completely useless at malware detection
Some pinpointed software nasties but were suspicious of printer drivers too Researchers from the Universities of Guelph and Waterloo have discovered exactly how users decide whether an application is legitimate or malware before installing it – and the good news…
Scams Using Malicious Smart Contracts, YouTube videos to Steal Crypto
SentinelOne researchers found multiple ongoing crypto scams that use AI-generated videos on aged YouTube accounts to market trading bots that hide malicious smart contracts that are designed to empty victim crypto wallets of Ethereum. The post Scams Using Malicious Smart…
ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections
A combination of propagation methods, narrative sophistication, and evasion techniques enabled the social engineering tactic known as ClickFix to take off the way it did over the past year, according to new findings from Guardio Labs. “Like a real-world virus…
IT Security News Hourly Summary 2025-08-05 18h : 34 posts
34 posts were published in the last hour 16:3 : Surge in Cyber Attacks Targeting AI Infrastructure as Critical Vulnerabilities Emerge 16:3 : Perplexity is sneaking onto websites to scrape blocked content, says Cloudflare 16:3 : Mitsubishi Electric Iconics Digital…
Microsoft Launches Zero-Day Quest Hacking Contest with Rewards Up to $5 Million
Microsoft has unveiled the return of its groundbreaking Zero Day Quest initiative, escalating the stakes in cybersecurity research with a staggering total bounty pool of up to $5 million. Building on the success of last year’s inaugural event, which offered…
Watch AI models compete right now in Google’s new Game Arena
As AI models increasingly ace conventional tests, researchers are looking for new benchmarking methods. Google is betting on games. This article has been indexed from Latest news Read the original article: Watch AI models compete right now in Google’s new…
AI security: Top experts weigh in on the why and how
<p>AI is rapidly transforming business operations, bringing with it unprecedented security challenges that traditional cybersecurity approaches are not equipped to deal with. But securing the unique vulnerabilities that AI brings is essential.</p> <div class=”ad-wrapper ad-embedded”> <div id=”halfpage” class=”ad ad-hp”> <script>GPT.display(‘halfpage’)</script>…
Microsoft’s Project Ire Autonomously Reverse Engineers Software to Find Malware
Microsoft has unveiled Project Ire, a prototype autonomous AI agent that can analyze any software file to determine if it’s malicious. The post Microsoft’s Project Ire Autonomously Reverse Engineers Software to Find Malware appeared first on SecurityWeek. This article has…
St. Paul Extends State of Emergency After Devastating Cyberattack
August 5, 2025 | St. Paul, Minnesota The City of St. Paul is in the midst of one of the most disruptive cyber incidents in its history, prompting officials to extend a local state of emergency by 90 days as…
Elevate your protection with expanded Microsoft Defender Experts coverage
Defender Experts now offers 24/7, expert-driven protection for cloud workloads, beginning with hybrid and multicloud servers in Microsoft Defender for Cloud. Additionally, third-party network signals can be used in Microsoft Defender Experts for XDR to enhance incidents for faster and…
Project Ire: Microsoft’s autonomous malware detection AI agent
Microsoft is working on a AI agent whose main goal is autonomous malware detection and the prototype – dubbed Project Ire – is showing great potential, the company has announced on Tuesday. Tested on a dataset of known malicious and…
Surge in Cyber Attacks Targeting AI Infrastructure as Critical Vulnerabilities Emerge
Security researchers discovered 28 distinct zero-day vulnerabilities, seven of which were expressly directed at artificial intelligence infrastructure, in a startling discovery made during the 2025 Pwn2Own Berlin event, which was organized by Trend Micro’s Zero Day Initiative. This inaugural AI…
Perplexity is sneaking onto websites to scrape blocked content, says Cloudflare
Cloudflare has accused the AI company of bypassing websites’ no crawl directives. Here’s how the CDN is responding. This article has been indexed from Latest news Read the original article: Perplexity is sneaking onto websites to scrape blocked content, says…
Mitsubishi Electric Iconics Digital Solutions Multiple Products
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 4.1 ATTENTION: Low attack complexity Vendor: Mitsubishi Electric Iconics Digital Solutions, Mitsubishi Electric Equipment: ICONICS Product Suite and Mitsubishi Electric MC Works64 Vulnerability: Windows Shortcut Following (.LNK) 2. RISK EVALUATION Successful exploitation of…
Tigo Energy Cloud Connect Advanced
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Tigo Energy Equipment: Cloud Connect Advanced Vulnerabilities: Use of Hard-coded Credentials, Command Injection, Predictable Seed in Pseudo-Random Number Generator (PRNG). 2. RISK EVALUATION Successful exploitation of…
Allianz Life Data Breach Exposes Personal Information of 1.4 Million Customers
Allianz Life Insurance has disclosed a major cybersecurity breach that exposed the personal details of approximately 1.4 million individuals. The breach was detected on July 16, 2025, and the company reported the incident to the Maine Attorney General’s office…
French Defense Shipbuilder Naval Group Probes 1TB Data Breach
France’s state-owned defense firm Naval Group is investigating a major cyberattack after 1TB of allegedly sensitive data was leaked on a well-known hacking forum. The company, which designs and builds naval vessels, described the incident as an attempt at…
ExtraHop helps SOCs connect the dots with identity-driven detection
ExtraHop unveiled new innovations to accelerate incident response, offering an understanding of cyberattacks by linking disparate detections to compromised identities. As threat actors increasingly weaponize user identities to carry out their attacks, exploiting identity directory services like Active Directory and…