BlueNoroff uses fake Zoom and Teams meetings to profile crypto wallets, hijack Telegram accounts, and deliver Windows and ...
AgentForger could let a phishing link forge, publish, and schedule a rogue ChatGPT Workspace Agent with access to connected ...
Certighost exploit lets a domain user obtain a Domain Controller certificate and reach DCSync through a vulnerable AD CS ...
Two Bing image search flaws let crafted SVGs run commands as SYSTEM on Windows workers & root on Linux before Microsoft fixed ...
An operator ran the Hermes AI agent with approval prompts disabled during a Thai finance ministry intrusion, then left its ...
Redis ships seven security releases after authenticated RESTORE RCE PoCs target versions 6.2.22, 7.4.9, 8.6.4, and 8.8.0.
CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...
AI agent visibility alone cannot enforce least privilege, requiring identity-centric, intent-aware, platform-agnostic ...
NodeBB fixes eight flaws Aikido rates high severity, including bugs exposing admin pages, private messages, and federation ...