Forever Security finds code execution, local file theft and address-bar spoofing flaws in Cursor, GitHub Copilot, Codex, VS Code and Claude Desktop Security researchers have identified vulnerabilities in the embedded browsers of five widely used desktop AI assistants that could allow malicious web pages or local files to execute code on a user’s computer, read […]
Continue Reading
Attackers abused legitimate software components to deploy previously unknown malware, manipulate system logs and evade detection on a customized Windows 10 platform. Kaspersky researchers have uncovered an attack targeting a customized version of Windows 10 used exclusively by government organizations in an Asian country, in which attackers abused legitimate software components to deploy a previously […]
Continue Reading
The open-weight model attempted to send a file to an Alibaba Cloud storage bucket despite indicating in its reasoning trace that it would not invoke any tools. Alibaba’s Qwen3.8-Flash-Next AI model attempted to upload a file to a cloud storage bucket in Beijing while being tested on a cybersecurity task, according to Cohere, which said […]
Continue Reading
The group used US-hosted servers and malware capable of stealing files and routing commands through Telegram, researchers say An Iranian-linked cyberespionage group has rebuilt its command-and-control infrastructure after an unusually long period of inactivity, adopting new hosting arrangements and continuing to use malware designed to steal sensitive files and conduct surveillance, according to research published […]
Continue Reading
Two critical PHP vulnerabilities allow unauthenticated remote code execution. A disclosure embargo broke down, while security experts warn that AI is making complex exploits more practical. Two critical vulnerabilities in the PHP programming language are drawing urgent attention from security teams after researchers demonstrated unauthenticated remote code execution and Amazon reported an exploitation attempt four […]
Continue Reading
The cloud deployment provider will begin suspending services on December 1, with a complete shutdown scheduled by year-end, after attackers accessed customer data, credentials and infrastructure in two incidents. Cloud deployment provider Zeabur is winding down its platform after two security incidents in less than two months exposed weaknesses in its infrastructure and credential management, […]
Continue Reading
The partnership will let enterprises buy OpenAI models through Google Cloud Marketplace, while Microsoft remains OpenAI’s primary cloud partner. OpenAI is partnering with Google Cloud to make its frontier AI models and Codex coding agent available through Google Cloud’s Model Garden, giving enterprises another route to deploy OpenAI technology within their existing cloud environments. The […]
Continue Reading
Weak private keys could allow attackers to forge trusted certificates and impersonate websites; Google, Mozilla and Cloudflare have taken steps to contain the risk Private keys associated with eight digital certificates issued by Indian certification authority eMudhra have been compromised, according to a Mozilla security engineer, potentially allowing attackers to forge trusted certificates and impersonate […]
Continue Reading
DHS order extends restrictions to third-party products built using DeepSeek implementations, raising questions about software supply-chain compliance and AI procurement. The US Department of Homeland Security has ordered federal civilian agencies to remove products and services developed by Chinese artificial intelligence startup DeepSeek from their information technology systems, while prohibiting further procurement of the company’s […]
Continue Reading
Researchers found prompt-based safeguards barely slowed malicious instructions planted in everyday mobile content, a warning for enterprises piloting agents that act on employee devices. AI assistants that operate smartphones can be tricked by fake instructions hidden in everyday messages, emails and calendar invites, a new study has found. On average, the assistants spotted the planted […]
Continue Reading