New Cisco firewall zero-day being actively exploited
A high-severity flaw in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security […]
Fake Anthropic AI previews lure in overeager employees
Everyone wants to know what Anthropic is up to, and hackers are gleefully exploiting the fact. […]
Anthropic and OpenAI diverge on who should pull the plug on risky AI
OpenAI and Anthropic agree that frontier AI systems need stronger oversight, but they are proposing sharply […]
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to […]
Vulnerability exploitation rising as the root cause of many breaches
More evidence has emerged that attackers are turning to vulnerabilities rather than phishing as a means […]
Securing MCP servers before the AI rollout outpaces security
Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved […]
PHP2Shell will persist in enterprise environments for years
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application […]
Cloudflare AI Leak Crossed Customer Boundaries — and Access Controls Couldn’t Stop It
Cloudflare’s AI data leak exposed customer information across sessions, revealing a security gap in shared AI […]
Fake ChatGPT, Claude apps spread malware via signed AI binaries
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally signed executables […]
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting malicious […]