Namespace Reuse Vulnerability Exposes AI Platforms to Remote Code Execution

A newly discovered vulnerability in the AI supply chain—termed Model Namespace Reuse—permits attackers to achieve Remote Code Execution (RCE) across major AI platforms, including Microsoft Azure AI Foundry, Google Vertex AI, and thousands of open-source projects. By re-registering abandoned or…

Harnessing Smart Digital Reality and Twinning for Next-generation Cyber Risk Mitigation

In today’s rapidly evolving digital landscape, the challenges surrounding cybersecurity are growing exponentially. Industrial sectors, including energy, manufacturing, and utilities, are increasingly becoming targets for cyber threats, particularly as their… The post Harnessing Smart Digital Reality and Twinning for Next-generation…

Detecting Data Leaks Before Disaster

In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk. According to the Wiz Research team, they identified a publicly accessible…

Apache DolphinScheduler Vulnerability Patched — Update Immediately

A low-severity security issue in Apache DolphinScheduler has been addressed in the latest release. Identified as CVE-2024-43166 and classified under CWE-276: Incorrect Default Permissions, this vulnerability affects all DolphinScheduler versions prior to 3.2.2. Users are strongly advised to upgrade to…

PayPal users targeted in account profile scam

A highly sophisticated email scam is targeting PayPal users with the subject line of “Set up your account profile.” This article has been indexed from Malwarebytes Read the original article: PayPal users targeted in account profile scam