Experts from Palo Alto Networks Unit 42 have described a new attack vector targeting multi-agent systems, known as agent session smuggling — a technique in which a malicious remote agent embeds hidden instructions during...
The Chinese hacking group Storm-1849 continues its aggressive campaign against Cisco ASA devices used by government agencies and major organizations worldwide. The findings come from Unit 42, the threat intelligence division of Palo Alto...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that a high-severity flaw in the Linux kernel is being actively exploited in ransomware campaigns. The vulnerability in question is CVE-2024-1086 — a use-after-free...
A critical vulnerability has been discovered in the Claude chatbot, allowing attackers to trick the AI into transmitting users’ personal data to malicious third parties. The issue was reported by security researcher Johann Rehberger,...
AI-powered browsers are rapidly reshaping the familiar landscape of web browsing, evolving from passive tools for displaying pages into active participants in user interaction. Following the recent launch of Copilot Mode in Microsoft Edge...
The Australian government has issued a warning about active cyberattacks targeting unprotected Cisco IOS XE devices used across corporate and government networks. According to the Australian Signals Directorate (ASD), attackers continue to infect routers...
Researcher Jose Pino unveiled a proof-of-concept for a vulnerability in the Blink rendering engine used by Chromium-based browsers, demonstrating how a single web page can, within seconds, incapacitate numerous popular browsers and halt a...
New research has revealed that even the most advanced hardware-based data isolation technologies from leading chip manufacturers—Nvidia Confidential Compute, AMD SEV-SNP, and Intel SGX/TDX—fail to withstand inexpensive physical attacks. These mechanisms, collectively known as...
A vulnerability in the Google Messages app for Wear OS has jeopardized the privacy of millions of smartwatch owners, allowing third-party applications to send messages on behalf of users without requesting permissions or confirmation....
A vulnerability has been discovered in early builds of OpenVPN, allowing attackers to execute arbitrary commands on a user’s machine. The flaw affects versions from 2.7_alpha1 through 2.7_beta1 and poses a serious threat to...
A newly discovered vulnerability in ChatGPT Atlas, the experimental browser developed by OpenAI, allows attackers to silently inject malicious commands into the AI’s persistent memory, enabling the execution of arbitrary code on behalf of...
Cyberthreat analysts are reporting active exploitation of a critical vulnerability in Windows Server Update Services (WSUS), identified as CVE-2025-59287. Merely days after Microsoft released an emergency patch and CISA added the flaw to its...
