-
Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s signed-in session. OpenAI fixed the issue on October 26 and classified it as P1. The Parameter re…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations across Africa and Latin America. The findings illustrate AI moving beyond attack preparation into opera…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Apple has started sending a new round of threat notifications to users across 99 countries, warning them about targeted mercenary spyware attacks, according to cybersecurity researcher Costin Raiu. In his post, Raiu noted that these notifications are r…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Chainalysis has confirmed a cybersecurity incident in which an external actor gained unauthorized access to the company’s systems and internal tools through what it described as “offensive agentic techniques.” The company disclosed the incident on Octo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers are impersonating trusted AI bots to scan enterprise websites for exposed passwords, API keys, and cloud credentials. The company tracked a single actor rotating through approximately 32 bot identities, including ChatGPT, Claude, and Perplexi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WS Audiology (WSA), the parent company of Widex and Signia, is investigating unauthorized access to its internal IT infrastructure after taking selected systems offline to contain a cybersecurity incident. The disruption affected customer applications …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Malicious Claude Code extensions distributed through Cursor’s VS Code The Extension Marketplace tried to create persistent SSH backdoors on Windows and macOS developer systems. The affected packages were the Anthropic.claude-code versions 2.1.312 and 2…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors are weaponizing ARTEX, an autonomous penetration-testing framework, to accelerate network intrusions, escalate privileges, and steal sensitive information. Google Threat Intelligence Group and Mandiant investigations described in the supp…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
October’s cybersecurity disclosures spanned cryptocurrency platforms, developer infrastructure, certificate authorities, government records, gaming accounts, and retail operations. Dubbed Hacktober, the wave included unrelated incidents rather than a s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A self-deleting Windows infostealer named VOLTA uses commercial AI models to turn stolen credentials, sessions, and cryptocurrency data into prioritized victim assessments. The malware, self-named “VOLTA-AUTODOXER,” combines extensive collection capabi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
