1+ day, 4+ hour ago   (603+ words) JFrog Artifactory instances continue to get hit hard. Multiple attackers are exploiting three JFrog Artifactory bugs to gain administrative control over vulnerable instances - in some cases, just days after the vendor published a patch - and then using this illicit access…...

2+ day, 7+ hour ago   (817+ words) Human operator: don't touch CIS orgs. AI agents: look a squirrel! An unknown attacker used hundreds of AI agents to exploit two PaperCut MF/NG bugs and break into at least 395 organizations. The victims were concentrated in the US education…...

2+ day, 8+ hour ago   (406+ words) Getting straight answers out of OpenAI about how many websites and services its agents have hijacked increasingly seems like pulling teeth, as the company seems intent on making the world discover each instance one by one. Case in point: The…...

2+ day, 13+ hour ago   (579+ words) McKesson's cyberattack last month affected roughly 6.4 million individuals, according to Have I Been Pwned (HIBP). The breach notification service added data leaked by serial extortionists ShinyHunters, revealing the scale of the attack for the first time. ShinyHunters initially claimed to…...

2+ day, 16+ hour ago   (470+ words) Fears of an AI takeover remain unfounded after Microsoft demonstrated that Copilot can sometimes struggle to remain upright, let alone march over the remnants of humanity. The copilot.microsoft.com website fell over for an hour and 40 minutes overnight, returning…...

3+ day, 7+ min ago   (891+ words) At least four espionage groups, most with suspected links to China, are using a new exploit kit that chains two Chromium-based browser flaws and one Microsoft Windows bug to break into organizations' networks in the US and Southeast Asia. Mark…...

3+ day, 9+ hour ago   (529+ words) Zero-day researcher Nightmare Eclipse, aka MSNightmare, published yet another Microsoft Defender proof-of-concept exploit for a zero-day dubbed ShieldCrash, which they claim will allow attackers to bypass the earlier ShieldBreak patch and read files as SYSTEM. “I might rework this later…...

3+ day, 14+ hour ago   (661+ words) Tencent has patched up a zero-click vulnerability that security researchers used to create a worm capable of spreading through calls on WeChat. With more than 1.4 billion monthly active users, WeChat is among the most popular apps in the world. According…...

4+ day, 3+ hour ago   (639+ words) In the dispiriting race to replace human store managers with AI, OpenAI has taken the lead, according to Andon Labs, a business that analyzes whether AI can take on real-world tasks. OpenAI's latest model, GPT-6 Astra, has demonstrated that it…...