-
Google has disclosed that PageBreak, an internal AI security agent developed by its Product Security team, has identified and validated more than 500 cross-site scripting (XSS) vulnerabilities across the company’s first-party web applications, includin…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Dutch Institute for Vulnerability Disclosure was breached through two Zammad 0-days in an AI-powered attack that led to remote code execution and root access.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A China-linked threat actor known as TA419 has targeted U.S. artificial intelligence policy specialists through highly customized credential-phishing operations. This campaign, which involves impersonation, adversary-in-the-middle infrastructure, and a…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The U.S. Federal Trade Commission (FTC) has initiated a broad investigation into OpenAI, Anthropic, and other leading artificial intelligence developers to examine potential consumer harm arising from advanced AI systems. This inquiry will assess wheth…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic has enhanced enterprise security visibility for its AI assistant, Claude, with the Compliance API. This feature lets organizations extract data on activity, conversations, files, projects, and agent sessions into their existing governance and…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Phishing exposure reached 69.9% across five key US industries, with finance and manufacturing facing the highest levels, according to ANY.RUN data.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly identified Windows botnet dubbed x47.c is marketing a blend of conventional DDoS tooling, credential theft, SOCKS5 proxying, fast-flux command-and-control infrastructure, and an “AI API drain” capability designed to exhaust victims’ paid artifi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
An internet-exposed cybercrime server linked to the BlackHatSect0r and DXQRTXX personas, revealing an operational environment that allegedly combined AI-assisted automation. Custom command-and-control tooling, phishing resources, stolen credentials, ta…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A surge of lookalike domains targeting users of TypeSafe AI’s newly launched Jev decision model, with roughly 670 “jev”-branded domains obtaining TLS certificates within eight days of the product’s debut. Several sites are already operating as unoffici…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Docker-focused botnet that repurposes the legitimate, open-source Hermes Agent framework as an interactive post-compromise control layer. The campaign, tracked as CARBONATO, targets Docker daemons exposed without authentication on TCP port 2375, then…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
