AI & ML
Artificial intelligence and machine learning news
Imposter abused trust in OpenAI, Anthropic, and 30 others to hunt for secrets
Attackers are impersonating AI agents from companies including OpenAI, Anthropic, and Meta in a bid to trick organizatio...
Securing MCP servers before the AI rollout outpaces security
Your company’s CTO has a plan to implement your company’s first LLM-based application. The board approved it, and now yo...
PHP2Shell will persist in enterprise environments for years
Two critical vulnerabilities were announced last week in PHP, the internet’s most widely used web application runtime, a...
Fake ChatGPT, Claude apps spread malware via signed AI binaries
Attackers are distributing malware through fake ChatGPT and Claude desktop applications, using legitimate, digitally sig...
Gheist turns GitHub Actions into a secret extraction service
A threat actor dubbed Gheist is turning compromised GitHub accounts into credential-harvesting platforms. By planting ma...
Trusting Unsloth’s trust setting could mean executing malicious code
AI developers may have a security setting enabled and still end up running attacker-controlled code. Pillar Security has...
When prevention fails: Why cyber resilience is the next big test of trust
Imagine arriving at work on a Monday morning to find employees cannot log in, customer service is unavailable, and criti...
30 Google Secrets You’ll Wish You Knew Years Ago
Think you know Google? Think again—hidden deep within that simple search bar is a subterranean network of secret search...
Oracle patches 1295 security vulnerabilities in October, including six scoring 10.0
Oracle has patched 1295 security vulnerabilities with its October Critical Patch Update Advisory; six of them scored the...
Dual BIOS: The laptop security feature SMBs don’t know they need
Every security checklist starts with the basics: strong passwords, multifactor authentication, spotting phishing, and ke...
Meta hit with $25 billion fine for illegally sharing user data
A judge in New Mexico has fined Meta $25 billion for its flouting of data privacy laws between 2010 and 2021, including...
eMudhra quits global TLS certificate market after compromise of CA signing keys
Indian digital trust company eMudhra has announced that it is exiting the global SSL/TLS certificate business and is off...
The ‘Mythos moment’ has already passed. Now comes the hard part for cybersecurity
When Anthropic introduced Claude Mythos Preview, the cybersecurity debate quickly turned to what AI could do: uncover de...
The AI notetaker risk is now an everywhere problem
The businesspeople adopting AI notetakers are not being reckless. They are responding to a real business need. Our teams...
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the...
GitLab critical patches include one for a bug that allows code execution by unauthenticated users
GitLab on Wednesday published updated versions of its Community Edition (CE) and Enterprise Edition (EE) that address a...
Security teams urged to center defense on the flaw profile attackers target most
Attackers are increasingly focusing on a limited range of critical vulnerabilities to run attacks with flaws packaged in...
LiteLLM release pipeline hacked to distribute credential-stealing malware
Hackers hijacked the software release pipeline of LiteLLM, a popular open-source AI gateway, to distribute credential-st...
WordPress sites compromised after TeamUpdraft credential exposure
Attackers are using stolen connection keys exposed in a TeamUpdraft security breach to install malicious plugins on affe...
Google, Mozilla revoke eMudhra intermediates after private key compromise
Private keys associated with eight intermediate certificate authorities operated by Indian digital trust provider eMudhr...