Akira Ransomware Exploits SonicWall VPNs in Likely Zero-Day Attack on Fully-Patched Devices
SonicWall SSL VPN devices have become the target of Akira ransomware attacks as part of a newfound surge in activity […]
Apple ID scam leads to $27,000 in-person theft of Ohio man
You’ve probably heard about people scamming from halfway around the world, but sometimes they turn up at your door. That’s
Apple ID scam leads to $27,000 in-person theft of Ohio man Read More »
Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection
Cybersecurity researchers have disclosed a now-patched, high-severity security flaw in Cursor, a popular artificial intelligence (AI) code editor, that could
Cursor AI Code Editor Fixed Flaw Allowing Attackers to Run Commands via Prompt Injection Read More »
OpenAI kills “short-lived experiment” where ChatGPT chats could be found on Google
A little-known ChatGPT “feature” is now gone. It could be a good thing. On X, OpenAI Chief Information Security Officer
OpenAI kills “short-lived experiment” where ChatGPT chats could be found on Google Read More »
Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts
Cybersecurity researchers have detailed a new cluster of activity where threat actors are impersonating enterprises with fake Microsoft OAuth applications
Attackers Use Fake OAuth Apps with Tycoon Kit to Breach Microsoft 365 Accounts Read More »
AI-powered Cursor IDE vulnerable to prompt-injection attacks
A vulnerability that researchers call CurXecute is present in almost all versions of the AI-powered code editor Cursor, and can
AI-powered Cursor IDE vulnerable to prompt-injection attacks Read More »
Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME)
Earlier this year, a group of external researchers identified and reported a vulnerability in Cloudflare’s SSL for SaaS v1 (Managed
Vulnerability disclosure on SSL for SaaS v1 (Managed CNAME) Read More »
AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown
Cybersecurity researchers have flagged a malicious npm package that was generated using artificial intelligence (AI) and concealed a cryptocurrency wallet
AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown Read More »
You Are What You Eat: Why Your AI Security Tools Are Only as Strong as the Data You Feed Them
Just as triathletes know that peak performance requires more than expensive gear, cybersecurity teams are discovering that AI success depends