Microsoft has revealed a new side-channel attack targeting remote large language models, allowing a passive adversary who merely observes encrypted network traffic to infer the topic of a user’s conversation with an AI, even...
Researchers discovered several NuGet packages in the public registry that conceal covert sabotage code scheduled to activate in 2027 and 2028. The tainted packages target three popular .NET data engines—Microsoft SQL Server, PostgreSQL, and...
Helping companies negotiate with ransomware gangs has always seemed like a peculiar business. In theory, one mediates with cybercriminals, attempting to lower ransom demands so that victims can resume operations more swiftly. In practice,...
A next-generation spyware operated undetected for nearly a year, hiding deep within Samsung Galaxy smartphones and exploiting a vulnerability unknown to the manufacturer. Researchers from Palo Alto Networks Unit 42 revealed that the malware,...
A seemingly simple idea — to streamline the management of a home network and enhance its security — unexpectedly turned into a sequence of near-catastrophic mistakes, all triggered by the advice of popular AI...
In 2025, users continue to rely on the most elementary password combinations to protect their accounts. A study by Comparitech, based on the analysis of more than two billion real passwords leaked on data...
Authorities in the U.S. state of Nevada have released a detailed technical report dissecting a large-scale cyberattack that encrypted government systems with ransomware. The document provides an exhaustive account of the attackers’ actions, their...
Google has released an emergency security update for the Chrome browser, addressing a series of vulnerabilities that could allow remote code execution and potential system takeover. The update, issued on 5 November 2025, is...
Cisco has warned customers of a fresh wave of attacks against its firewalls: adversaries have been striking vulnerable appliances for at least six months, and in early November a new exploitation variant emerged. In...
Tenable Research has identified seven new vulnerabilities and exploitation techniques in ChatGPT that allow attackers to extract private user data, bypass security mechanisms, and persist access across sessions. These findings expose a series of...
The regional broadcasting company RTV Noord, based in the Netherlands, has suffered a large-scale cyberattack that crippled much of its digital infrastructure. The incident has severely disrupted broadcasting operations and the publication of content...
The Apache OpenOffice project has come under public scrutiny following claims by the Akira ransomware group, which alleged a cyberattack resulting in the theft of 23 gigabytes of internal data. However, the organization overseeing...
