Google Patches Gemini AI Hacks Involving Poisoned Logs, Search Results
Several weaknesses patched recently by Google in Gemini could have allowed attackers to trick the AI assistant into helping them achieve data theft and other…
Author: Cybernoz
When Audits Fail: Four Critical Pre-Auth Vulnerabilities in TRUfusion Enterprise
In early 2025, we encountered a mission-critical software component called TRUfusion Enterprise on the perimeter of one of our customers that is used to transfer…
Cisco firewall flaws endanger nearly 50,000 devices worldwide
Listen to the article 2 min This audio is auto-generated. Please let us know if you have feedback. Nearly 50,000 Cisco firewall devices with recently…
Microsoft fixes Windows DRM video playback issues for some users
Microsoft says it has “partially” resolved a known issue that caused problems when trying to play DRM-protected video in Blu-ray/DVD/Digital TV applications. This bug affects…
Google Gemini Vulnerabilities Let Attackers Exfiltrate User’s Saved Data and Location
Three new vulnerabilities in Google’s Gemini AI assistant suite could have allowed attackers to exfiltrate users’ saved information and location data. The vulnerabilities uncovered by…
Hackers Use Cellular Router API to Send Malicious SMS with Weaponized Links
The monitoring and analysis of vulnerability exploitations are among the primary responsibilities of Sekoia.io’s Threat Detection & Research (TDR) team. Using honeypots, the team monitors…
US Auto Insurance Platform ClaimPix Leaked 10.7TB of Records Online
A massive collection of data belonging to customers of ClaimPix, an Illinois-based platform for managing auto insurance claims across the United States, was recently discovered…
CISA says it will fill the gap as some federal funding for MS-ISAC dries up
The cooperative agreement between the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the not-for-profit Center for Internet Security is ending today, the agency has…
Context Is the Key to Effective Incident Response
Sep 30, 2025The Hacker NewsArtificial Intelligence / Threat Detection The Problem: Legacy SOCs and Endless Alert Noise Every SOC leader knows the feeling: hundreds of…
Harrods hackers start contacting customers
Landmark London department store Harrods has warned that a number of its shoppers have been contacted by the cyber criminals behind the theft of their…
Call for Presentations Open for 2025 CISO Forum Virtual Summit
The official Call for Presentations (CFP) for SecurityWeek’s 2025 CISO Forum Virtual Summit, being held November 12-13, 2025, is open through October 10, 2025. Throughout this two-day virtual event, sessions…
Broadcom patches VMware Zero-Day actively exploited by UNC5174
Broadcom patches VMware Zero-Day actively exploited by UNC5174 Pierluigi Paganini September 30, 2025 Broadcom patched six VMware flaws, including CVE-2025-41244, which has been exploited in…