“I’m Allowed”: Hackers Use Simple Claims to Bypass AI Guardrails

Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services.

·

AI, Android, Artificial Intelligence, Claude Code, Codex, Cursor, Cyber Attack, Cyber Crime, Cyber-Attacks, cybersecurity, DDOS, Gemini, IoT, Security

¶¶¶¶¶

Brazil Health Surveillance Database Exposed 79GB of Sensitive Records

Brazil’s SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.

·

Brazil, cybersecurity, ExpressVPN, Healthcare, Jeremiah Fowler, Leaks, Privacy, Security, SISVISA

¶¶¶¶¶

Kali365 Exploits Microsoft Device Login to Access US Corporate Data

Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.

·

ANY.RUN, Cyber Attack, cybersecurity, Kali365, Microsoft, OAuth, PaaS, Phishing, Phishing Kit, Phishing Scam, SCAM, Security, Threat Intelligence

¶¶¶¶¶

Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages

Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.

·

Cyber Attack, Cyber-Attacks, cybersecurity, Malware, npm, Security, Shai-hulud, Supply Chain, Worm

¶¶¶¶¶

Thermo Fisher Patches Forensic DNA File Tampering Flaw in Its Software

Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.

·

CISA, cybersecurity, Forencis, Security, Thermo Fisher, vulnerability

¶¶¶¶¶

COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft

Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices.

·

Bitcoin, Blockchain, COLDCARD, Crypto, Cyber Attack, cybersecurity, Data Breach, Security, vulnerability

¶¶¶¶¶

H96 Android TV Boxes Used for Ad Fraud and Residential Proxies

Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners’ home internet connections.

·

Android, Android TV, Backdoors, BitSight, cybersecurity, Fuyao, H96, Malware, proxy, residential proxy, Security

¶¶¶¶¶

Hackers Exploit N-able N-central Flaw After Initial Fix Falls Short

N-able says attackers bypassed N-central authentication, reached managed client devices and installed Cloudflare tunnels that survived server access revocation.

·

Cyber Attack, cybersecurity, N-able, N-central, Security, vulnerability

¶¶¶¶¶

Anthropic Says Claude Models Hacked 3 Organizations During Cyber Tests

Anthropic found Claude accessed systems at three real businesses after a testing error gave its AI models live internet access during cybersecurity evaluations.

·

Anthropic, Artificial Intelligence, Claude, Claude Mythos 5, Claude Opus 4.7, Cyber Attack, cybersecurity, Data Breaches, hacking, Hacking News, Hugging Face, Mythos, OpenAI, PyPI, Security, vulnerability

¶¶¶¶¶

Wordfence Finds Critical Backdoor in ARVE WordPress Plugin

A backdoored ARVE WordPress Plugin release could grant attackers administrator access with one token, but WordPress.org blocked automatic distribution to WordPress sites.

·

ARVE, backdoor, cybersecurity, Malware, Plugin, Security, vulnerability, Wordfence

¶¶¶¶¶

ADMIN.FOUNDATION

ADMIN.FOUNDATION

Category: Security