About 700 OpenAI agents allegedly escaped evaluation sandboxes, compromised parts of Hugging Face infrastructure, and generated over 80,000 attack…
Tag: Cyber Security News
Top 10 Best Authentication-as-a-Service (AaaS) Providers in 2026 [Ranked & Scored]
Nobody gets promoted for building login, but plenty get breached maintaining it. Authentication-as-a-Service moved from convenience to best practice:…
Python MaaS Infostealer Builder Steals Passwords, Credit Cards and Cookies From 17 Browsers
A Python-based malware builder can turn a single stealer into Windows programs for different operators. The tool packages a payload designed to take saved…
Hackers Exploit GlobalProtect Flaw and Turn Stolen Data Into 2.4 Million Fraud Messages
Hackers broke into business networks, stole customer records and used those details to send convincing fake bills. The campaign, called Operation Master,…
Top 10 Best Adaptive / Risk-Based Authentication Tools in 2026 [Ranked & Scored]
Prompting every user for MFA on every login trains people to approve anything, leaving enterprises open to push-bombing and MFA fatigue attacks;…
Top 10 Best Biometric Authentication Solutions in 2026 [Ranked & Scored]
Matching a face got easy; proving the face is a live human at a real camera while generative AI mass-produces convincing deepfake threats is where the…
Hackers Don’t Need to Break Into the Cloud When They Can Steal the Keys
Infostealer malware is giving criminals a quieter route into corporate cloud environments. Instead of forcing their way through a hardened cloud…
Kiteworks Warned Customers to Shut Down Servers Over Potential Zero-Day Attack
Kiteworks warned customers to temporarily shut down their servers after receiving credible threat intelligence that a threat actor could target some…
Critical ViewSonic vCast Vulnerabilities Allow Attackers to Gain Full Control Over the Device
Critical vulnerabilities in ViewSonic’s vCast software could allow attackers on the same network to steal screen content, install malicious Android…
CISA Warns of Citrix NetScaler 0-Day RCE Vulnerabilities Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two critical Citrix NetScaler vulnerabilities to its Known Exploited…
PHP Fixed a Bug That Could Send Your Login Credentials to the Wrong Server
PHP has fixed a security flaw that could expose login credentials, cookies, and proxy authentication data to an unintended server during HTTP redirects.…
Which Platforms to Use for Enterprise Threat Intelligence
Enterprise threat intelligence calls for a platform that filters the flood of global threat data down to what is relevant to a specific organization,…
Wireshark 4.6.9 Fixes 19 Vulnerabilities Including Code Execution Via Malicious Packet
Wireshark has released version 4.6.9, a security-focused update that addresses 19 documented vulnerabilities across protocol dissectors, capture-file…
Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack
Citrix has released emergency security updates for NetScaler ADC and NetScaler Gateway after confirming that attackers are exploiting two critical remote…
New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory
A Windows process injection method disclosed by security researcher Two Seven One Three sidesteps two APIs closely associated with remote code injection:…
Citrix NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attacks
Citrix NetScaler administrators are confronting reports of two undisclosed remote code execution vulnerabilities allegedly exploited in real-world…
Local AI Model Modifies Windows Credential Dumper to Bypass EDR Detection
A locally hosted, uncensored artificial intelligence model modified a Windows credential-dumping utility until it evaded two Endpoint Detection and…
F-Droid 2.0 Released After 10 years With Major Redesign to Transform Open-Source Android App Discovery
F-Droid has released version 2.0 of its official Android app, delivering its largest client update in a decade. The open-source Android app repository…
OpenAI’s AI Agents Tried Hacking 4 Websites Without Being Prompted
OpenAI’s autonomous AI agents attempted to hack four government, university, and public-data systems while carrying out routine information-gathering…
16-Year-Old Researcher Finds Microsoft Auth Vulnerability that Exposes 17.3 Trillion Stored Records
A 16-year-old security researcher known as Faav uncovered an authentication flaw in Microsoft’s internal Titan analytics service that potentially exposed…