Attack &amp; News

Bend the beam like Beckham to defeat anti-jamming tech

It's hard to stop a signal jammer if you can't locate the source, say Rice University researchers

NEWSWired Security3 months ago

WhatsApp, Slack Notifications Could Hijack Google Gemini on Android

A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini's voic…

xAI Asks Court to Strip Alleged Grok Deepfake Nudes Victims of Anonymity

Four people suing Elon Musk's AI firm under pseudonyms due to the risks of being identified may face a difficult choice: Reveal yo…

NEWScriticalSecurity Magazine3 months ago

Only 9% of Organizations Patch Critical Vulnerabilities in 24 Hours

Only 9% remediate high-severity flaws in production within 24 hours; 74% do so in one to seven days.

NEWShighCVE-2026-234798.8 HIGHThe Hacker News3 months ago

Microsoft Fixes One-Click GitHub Dev Attack That Let Attackers Steal OAuth Tokens

Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to s…

Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026-23479)

Redis has patched a use-after-free in its blocking-client code that lets an authenticated user run arbitrary OS commands on the…

NEWShighCVE-2026-452479.8 CRITICALThe Hacker News3 months ago

CISA Adds Exploited Magento RCE Flaw CVE-2026-45247 to KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical flaw impacting Mirasvit Cache Warme…

NEWSSecurity Magazine3 months ago

Google DoubleClick Abused in New Malspam Campaign to Deliver .NET Loader

Cybersecurity researchers have flagged a new malspam campaign that makes use of Google's DoubleClick domain as a way to evade dete…

OpenAI and CEO Sam Altman Accused of Prioritizing Profit Over Safety in Lawsuit

Florida has sued OpenAI and CEO Sam Altman, claiming they place the profits over safety.

NEWScriticalThe Hacker News3 months ago

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stop…

NEWShighThe Register3 months ago

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits acco…

Another bug hunter leaks Microsoft exploits in defiance of company’s handling of vulnerability disclosures

Researchers follow in Nightmare Eclipse’s footsteps, flipping off Redmond in favor of insta-leaks

NEWShighInfosecurity Magazine3 months ago

Infosecurity Europe: Vulnerability Management Innovator Konvu Wins Cyber Startup Award

Inaugural Infosecurity Europe Cyber Startup Award Winner Impresses Panel with Ability Help Prioritize Vulnerabilities in AI era

Shrinking the IAM Attack Surface through Identity Visibility and Intelligence Platforms (IVIP)

The Fragmented State of Modern Enterprise Identity Enterprise IAM is approaching a breaking point. As organizations scale, identi…

UK banks offered access to OpenAI’s GPT-5.5 amid exclusion from Anthropic’s Glasswing expansion

150 new organizations inducted to cyber’s Soho House, including the first outside the US

NEWShighCVE-2026-338294.3 MEDIUMThe Hacker News3 months ago

Trump Signs Order Inviting Voluntary Review of Frontier AI Models

Trump's executive order invites voluntary pre-release review of frontier AI models

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

Cybersecurity researchers have disclosed details of an unpatched issue that could be exploited to disclose a user's NTLMv2 hash to…

Infosecurity Europe: How to Get Boards to Prioritize Cyber Risk Quantification

Cybersecurity leaders major companies discuss how they got support from the board on cyber risk

Anthropic Expands Mythos Access to 150 More Organizations

Anthropic widens Project Glasswing access to 150 more firms as patching becomes the bottleneck

Infosecurity Europe: Patch Responsibility Remains Up for Grabs as AI Unearths Decades of Flaws

The emergence of AI models capable to autonomously find and fix vulnerabilities at scale is having a significant impact on patchin…

Infosecurity Europe: Execs Must Treat Cyber Threats as Statecraft, ISACA Expert Say

Private firms are being targeted by nation-state groups for reasons beyond finance, argued ISACA’s Bharat Thakrar

Infosecurity Europe: AI-Powered Cybercrime Tools Surge on Dark Web

Halcyon’s Cynthia Kaiser lifts the lid on the dark web market for AI cybercrime tools

'Dumbass' criminal breaks the 'first rule of ransomware club'

You don't infect anyone in Russia or other CIS countries

NEWSSecurity Magazine3 months ago

Cisco sings Mythos' praises - but doesn't say how many bugs the model uncovered

Meanwhile, Anthropic adds 150 partners to Project Glasswing

Trump Signs Executive Order for Oversight of AI Models, Security Experts Discuss

President Trump has signed an executive order requesting AI companies to show models to the federal government. Security experts d…

NEWSWired Security3 months ago

Android Is Fighting Phone Scams With a New Feature to Prove Who’s Calling

Available for Android 12 and later, the anti-scam feature is baked into Google Dialer, which sends a silent “confirmation signal”…

NEWShighSecurity Magazine3 months ago

Hackers Tricked Instagram’s AI Chatbot to Hijack Accounts

Hackers deceived Instagram’s AI chatbot, prompting it to provide access to user accounts.

Infosecurity Europe: NCSC Urges Immediate Action to Boost Resilience as Uncertainty Persists

NCSC director of operations, Paul Chichester, says it’s time to future-proof cybersecurity today

Infosecurity Europe: Cybersecurity Teams Which Don’t Leverage AI are "Doomed to Fail"

Humans still need to be part of cyber defense, but refusing to deploy AI is no longer optional against AI-enhanced cyber threats,…