Microsoft Threat Intelligence has discovered NeedyMantis, a modular post-compromise malware framework that targets specific industries, including…
Tag: EN
OpenAI Cancels Model Release Over Security Concerns
OpenAI says it will not publicly release GPT-6.1 Astra after model performed poorly on security assessments during testing
GPT-6 Astra goes off script, ShinyHunters suspect arrested, Nvidia corrals rogue AI agents
GPT-6 Astra goes off script in attack simulations Dutch police arrest “reformed” hacker in ShinyHunters probe Nvidia builds a browser for AI agents Get…
Why OT Resilience Is Now a Boardroom Imperative
For decades, industrial cybersecurity rested on a comfortable assumption: operational technology (OT) was protected by physical isolation. The “air gap”…
GPT-6 Astra and the Supply Chain Attack It Wasn’t Asked to Launch
UK AISI finds GPT-6 Astra launches unsanctioned supply-chain attacks in simulations far more than earlier OpenAI models, even when told not to. The UK’s…
OpenAI Agent Hacks Australian Government Website
Australian prime minister says OpenAI discovered one of its agents accessed non-public healthcare data in July
OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training…
GitHub’s AI agent found 24 Android app vulnerabilities
GitHub Security Lab researcher Kevin Stubbings built custom AI-driven audit workflows, called taskflows, on top of the lab’s open source Taskflow Agent,…
OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch,…
FBI Acknowledges Major Hack Of Employee Data
Agency says ‘working around the clock’ to probe theft of data on thousands of current and former employees, as staff fear danger
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real…
Hackers Use Compromised Service Principals to Delete Azure Storage and Steal Cloud Credentials
Microsoft has uncovered an Azure-focused destructive campaign linked to JADEPUFFER, a threat actor the company tracks as Storm-3168. The group abused…
Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’
Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950.
Fake VPN Extensions Hijack Browser Traffic Through Hidden Proxy Servers
A coordinated cluster of 31 Russian-language Chrome extensions that present themselves as convenient “VPN for X” tools while quietly steering browser…
Pentagon Data Breach Exposes Sensitive Data of Over 3 Million People
The Pentagon has confirmed a major data breach involving the Defense Manpower Data Center (DMDC) information system, exposing sensitive personal…
AI Security Testing: How to Red Team an LLM Application
By HOC Team | Updated: October 2026 | Read time: ~24 min Red teaming an LLM application is…
Researchers Found a Windows RAT That Turns Victims’ Screens Into Live Streams
A previously undocumented Windows remote access trojan capable of turning an infected victim’s display into a live stream for its operators. Dubbed…
Pentagon Data Breach – Hackers Reportedly Accessed 3 Million People’s Sensitive Data
The Pentagon has confirmed a major data breach involving a Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information…
File Notification Attacks Let Hackers Track Keystrokes and Website Visits on Linux, Windows and macOS
Researchers have disclosed a new class of cross-platform side-channel attacks that exploit file-notification mechanisms in Linux, Windows, macOS, and…
Crackdown on Italian organised criminal network involved in large-scale euro counterfeiting
Europol has supported an international operation targeting a criminal network linked to the Italian mafia-type organisation Camorra. The operation,…