How AI guardrails are impeding the work of offensive cybersecurity researchers

We spoke with several cybersecurity researchers, who look for unknown vulnerabilities and develop tools to exploit them, about how OpenAI’s and Anthropic’s guardrails affect their work.

Hackers are exploiting recently patched WordPress bugs, putting millions of websites at risk

Two critical security flaws in WordPress’ software have given hackers the chance to remotely take over tens of millions of websites, according to an estimate by a cybersecurity researcher.

A hacker’s arrest just revealed how Microsoft can track your Windows device

A hacker used a VPN to stay anonymous. Microsoft’s Windows Global Device Identifier logged his activity anyway and handed it to the FBI.

Polymarket says hackers stole users’ funds

The prediction market giant Polymarket said it’s refunding users who had funds stolen due to a third-party breach.

A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak 

European offensive cybersecurity company Paradigm Shift released details of a flaw and a technique to exploit it that opens the door for hackers to unlock and break into older iPhones.

Hackers leak facial recognition records tied to millions of Madison Square Garden visitors

A cybercriminal group has published what it claims are millions of records stolen from Madison Square Garden Entertainment. The leak is drawing attention not just because of its size, but because it includes facial recognition data, internal threat ass…

Cybercriminals allegedly hacked tens of thousands of Fortinet firewalls used by major companies all over the world

An alleged Russian-speaking group of cybercriminals is reportedly compromising and targeting several major companies that use Fortinet Firewalls and VPNs through previously known passwords.

Oracle warns of security bug that hackers abused to breach 100+ companies

The tech giant warned of a security flaw that a cybercrime gang said it’s exploiting as part of a mass-hacking campaign. Google said it notified more than 100 organizations that had potentially vulnerable servers.

Cybercriminals claim breach of Oracle PeopleSoft servers at 100-plus organizations

The ShinyHunters hacking gang claims to have compromised the Oracle PeopleSoft servers of more than 100 organizations, including many universities.

WhatsApp says it caught new spyware attacks linked to NSO Group in violation of court order

The messaging giant announced that it disrupted a phishing campaign targeting its users with NSO’s spyware.