Fake Zoom installer hides macOS backdoor CloudSyncD

3 weeks ago

Jamf Threat Labs details CloudSyncD, a fake macOS Zoom installer that hides a phished password using invisible zero-width Unicode characters.…

CVE-2026-90970: Critical GitLab AI Gateway Flaw Fixed

3 weeks ago

GitLab fixes critical AI Gateway flaw that could let authenticated Duo users escape a prompt sandbox and execute commands on…

Antino Backdoor Lets China-Linked UAT-11587 Turn Microsoft 365 Into a C2 Channel

3 weeks ago

Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian…

U.S. CISA adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog

3 weeks ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Zammad GmbH Zammad flaws to its Known Exploited Vulnerabilities catalog. The U.S.…

AI Agents Attempt SQL Injection While Searching Government Data

3 weeks ago

AI agents probing US and Canadian government sites made SQL injection attempts while seeking data, but investigators found no evidence…

Investigators trace an AI agent ‘s path from research task to reconnaissance

3 weeks ago

Asymmetric Security traces rogue OpenAI AI agent activity that probed government sites, accessed staging servers, and evaded sandbox limits. Researchers…

U.S. CISA adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog

3 weeks ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Fortinet FortiMail flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity…

Operation KillSwitch: Police Dismantle KillSec Ransomware Group

3 weeks ago

Operation KillSwitch: Europol says the KillSec ransomware group, allegedly led by a 16-year-old, was dismantled after attacks on about 1,000…

Inside Gemini 4 Argon, the model Google is testing on its own infrastructure first

3 weeks ago

Google unveils Gemini 4 Argon, a frontier AI model built for coding, enterprise work, and autonomous cybersecurity defense, rolling out…

Public PoC Released for Apple CoreGraphics Zero-Day CVE-2026-86950

3 weeks ago

Apple patched a CoreGraphics zero-day that may have been exploited in targeted attacks. A public PoC for the flaw is…

This website uses cookies.