Analyst company Gartner has issued a recommendation to block AI-powered browsers to help organizations protect business data and cybersecurity. The company says most of these agentic browsers—browsers using autonomous AI models for interacting with web content and automating tasks…
Tag: CySecurity News – Latest Information Security and Hacking Incidents
Home Renovation Choices That Often Do Not Deliver Real Value
Home renovations are often regarded as investments; however, not every upgrade enhances a home’s function, character, or resale value. Designers specializing in working with properties that are older generally emphasize that intelligent, budget-savvy decisions bear greater importance than drastic…
IDESaster Report: Severe AI Bugs Found in AI Agents Can Lead to Data Theft and Exploit
Using AI agents for data exfiltrating and RCE A six-month research into AI-based development tools has disclosed over thirty security bugs that allow remote code execution (RCE) and data exfiltration. The findings by IDEsaster research revealed how AI agents deployed…
Fake GitHub OSINT Tools Spread PyStoreRAT Malware
Attackers are using GitHub as part of a campaign to spread a novel JavaScript-based RAT called PyStoreRAT, masquerading as widely used OSINT, GPT, and security utilities targeting developers and analysts. The malware campaign leverages small pieces of Python or…
AI Browsers Raise Privacy and Security Risks as Prompt Injection Attacks Grow
A new wave of competition is stirring in the browser market as companies like OpenAI, Perplexity, and The Browser Company aggressively push to redefine how humans interact with the web. Rather than merely displaying pages, these AI browsers will…
Apple Addresses Two Actively Exploited Zero-Day Security Flaws
Following confirmation that two previously unknown security flaws had been actively exploited in the wild on Friday, Apple rolled out a series of security updates across its entire software ecosystem to address this issue, further demonstrating the continued use of…
5 Critical Situations Where You Should Never Rely on ChatGPT
Just a few years after its launch, ChatGPT has evolved into a go-to digital assistant for tasks ranging from quick searches to event planning. While it undeniably offers convenience, treating it as an all-knowing authority can be risky. ChatGPT…
Indian Government Proposes Compulsory Location Tracking in Smartphones, Faces Backlash
Government faces backlash over location-tracking proposal The Indian government is pushing a telecom industry proposal that will compel smartphone companies to allow satellite location tracking that will be activated 24×7 for surveillance. Tech giants Samsung, Google, and Apple have opposed…
Brave Experiments With Automated AI Browsing Under Tight Security Checks
Brave has started testing a new feature that allows its built-in assistant, Leo, to carry out browsing activities on behalf of the user. The capability is still experimental and is available only in the Nightly edition of the browser,…
Asus Supplier Breach Sparks Security Concerns After Everest Ransomware Claims Data Theft
Asus has confirmed a security breach via one of its third-party suppliers after the Everest ransomware group claimed it had accessed internal materials belonging to the company. In its statement, Asus confirmed that a supply chain vendor “was hacked,”…
Emerging Predator Spyware Technique Enables Zero-Click Compromise
Intellexa is one of the most controversial and persistent players in the shadowy world of commercial cyber-espionage, even though mounting scrutiny, international sanctions, and ongoing investigations have led to increased scrutiny and investigation. Although it is best known for…
Aisuru Botnet Unleashes Record 29.7 Tbps DDoS Attack
A new record-breaking 29.7 Tbps distributed denial-of-service (DDoS) attack launched via the Aisuru botnet has set a new standard for internet disruption and reinforced that multi-terabit attacks are on track to soon be an everyday event for DDoS defenders.…
FBI Alerts Public about Scammers Using Altered Online Photos to Stage Fake Kidnappings
The Federal Bureau of Investigation has issued a new advisory warning people about a growing extortion tactic in which criminals take photos posted online, manipulate them, and present the edited images as supposed evidence during fake kidnapping attempts. The…
700+ Self-hosted Gits Impacted in a Wild Zero-day Exploit
Hackers actively exploit zero-day bug Threat actors are abusing a zero-day bug in Gogs- a famous self-hosted Git service. The open source project hasn’t fixed it yet. About the attack Over 700 incidents have been impacted in these attacks. Wiz…
Petco Takes Vetco Clinics Site Offline After Major Data Exposure Leaves Customer Records Accessible Online
Pet wellness brand Petco has temporarily taken parts of its Vetco Clinics website offline after a security failure left large amounts of customer information publicly accessible. TechCrunch notified the company about the exposed Vetco customer and pet data, after…
Ivanti Flags Critical Endpoint Manager Flaw Allowing Remote Code Execution
Ivanti is urging customers to quickly patch a critical vulnerability in its Endpoint Manager (EPM) product that could let remote attackers execute arbitrary JavaScript in administrator sessions through low-complexity cross-site scripting (XSS) attacks.The issue, tracked as CVE-2025-10573, affects the…
December Patch Tuesday Brings Critical Microsoft, Notepad++, Fortinet, and Ivanti Security Fixes
While December’s Patch Tuesday gave us a lighter release than normal, it arrived with several urgent vulnerabilities that need attention immediately. In all, Microsoft released 57 CVE patches to finish out 2025, including one flaw already under active exploitation…
UK Cyber Agency says AI Prompt-injection Attacks May Persist for Years
The United Kingdom’s National Cyber Security Centre has issued a strong warning about a spreading weakness in artificial intelligence systems, stating that prompt-injection attacks may never be fully solved. The agency explained that this risk is tied to the…
Rising Prompt Injection Threats and How Users Can Stay Secure
The generative AI revolution is reshaping the foundations of modern work in an age when organizations are increasingly relying on large language models like ChatGPT and Claude to speed up research, synthesize complex information, and interpret extensive data sets…
OpenAI Vendor Breach Exposes API User Data
OpenAI revealed a security incident in late- November 2025 that allowed hackers to access data about users via its third-party analytics provider, Mixpanel. The breach, which took place on November 9, 2025, exposed a small amount of personally identifiable information for…