AI Chat App Exposes 300 Million Messages from 25 Million Users
AI Chat App Exposes Messages The popular mobile application “Chat & Ask AI” has inadvertently exposed hundreds of millions of private user conversations. The app,…
Category: CyberSecurityNews
Chinese Hackers Attacking Singapore’s Telecommunications Sector to Compromise Edge Devices
Singapore’s telecommunications sector has recently been the target of a highly sophisticated cyber espionage campaign orchestrated by the Advanced Persistent Threat (APT) group known as…
Open-source LLM Vulnerability Scanner With 210+ Attacks Across 28 LLM Providers
Augustus LLM Vulnerability Scanner Augustus is a new open-source vulnerability scanner designed to secure Large Language Models (LLMs) against an evolving landscape of adversarial threats.…
DPRK IT Workers Impersonating Individuals Using Real LinkedIn Accounts to Apply for Remote Roles
The landscape of remote employment faces a persistent and evolving challenge as North Korean operatives refine their strategies to infiltrate global organizations. For years, these…
15,200 OpenClaw Control Panels with Full System Access Exposed to Internet
OpenClaw Control Panels Exposed A critical security failure in the rapidly adopting “agentic AI” ecosystem has left tens of thousands of personal and corporate AI…
European Commission Contains Cyber-Attack Targeting Staff Mobile Data
European Commission Cyber-Attack The European Commission has confirmed the detection and containment of a security incident affecting the central infrastructure that manages staff mobile devices.…
ScarCruft Abuses Legitimate Cloud Services for C2 and OLE-based Chain to Drop Malware
ScarCruft, a prolific North Korean-backed advanced persistent threat (APT) group, has significantly refined its cyberespionage capabilities in a newly identified campaign distributing the ROKRAT malware.…
New Node.js Based LTX Stealer Attackers Users to Exfiltrate Login Credentials
A sophisticated new malware strain dubbed “LTX Stealer” has emerged in the cyber threat landscape, utilizing a unique Node.js-based architecture to compromise Windows systems. First…
Roundcube Webmail Vulnerability Let Attackers Track Email Opens
Roundcube Webmail Vulnerability Roundcube, one of the world’s most popular open-source webmail solutions, has released critical security updates to address a privacy bypass vulnerability. The…
Hackers Exploit Legitimate Apple and PayPal Invoice Emails in DKIM Replay Attacks
Cybersecurity threats are swiftly evolving beyond easily spotted, poorly written phishing emails to sophisticated methods that leverage trusted digital infrastructure. Attackers are now exploiting legitimate…
Microsoft Exchange Online Flags Customers Legitimate Email as Phishing
Microsoft Exchange Online Flags Legitimate Email Microsoft Exchange Online is experiencing a service degradation that incorrectly flags legitimate customer emails as phishing, quarantining them and…
Claude Desktop Extensions 0-Click RCE Vulnerability Exposes 10,000+ Users to Remote Attacks
Claude Desktop Extensions 0-Click Vulnerability A new critical vulnerability discovered by security research firm LayerX has exposed a fundamental architectural flaw in how Large Language…