LangChain path traversal bug adds to input validation woes in AI pipelines
Back to the basics The exploit technique described in the report relies on insufficient input validation and unsafe handling of data across key integration points…
Latest Cybersecurity News — Page 761
View all →
Honda selects Macrium to strengthen cyber resilience across US manufacturing operations
Macrium Software, provider of backup and recovery solutions for manufacturing and critical infrastructure installations, has been selected by Honda Motor Co., Ltd. (Honda), to strengthen…
FBI warns Iran-linked cyber campaign uses Telegram bots to control compromised systems, scale attacks
The U.S. Federal Bureau of Investigation (FBI) published a FLASH advisory warning that Iranian state-linked cyber actors are expanding their operational playbook by leveraging messaging…
ChatGPT Data Leakage via a Hidden Outbound Channel in the Code Execution Runtime
Key Takeaways Sensitive data shared with ChatGPT conversations could be silently exfiltrated without the user’s knowledge or approval. Check Point Research discovered a hidden outbound…
Optimizing Risk Discovery and Remediation with Qualys Gateway Service (QGS)
Unpatched vulnerabilities remain one of the largest drivers of cyber risk, accounting for nearly 60% of cyber compromises. Modern security programs are therefore measured not only by…
Apple adds macOS Terminal warning to block ClickFix attacks
Apple has introduced a security feature in macOS Tahoe 26.4 that blocks pasting and executing potentially harmful commands in Terminal and alerts users to possible…
New Homoglyph Attack Techniques Help Cybercriminals Spoof Trusted Domains
Cybercriminals have found a clever way to trick people by swapping real letters in website addresses with characters that look almost the same. These are…
Russian Hackers Deploy “CTRL” for RDP Hijacking
Russian hackers are using a new remote access toolkit called “CTRL” to silently hijack Remote Desktop Protocol (RDP) sessions via FRP-based reverse tunnels, enabling stealthy,…
Dark Web Market Lists Alleged 375TB Lockheed Martin Data for $600M
Hackers are claiming to have stolen a trove of data belonging to Lockheed Martin, the world’s largest defense contractor and an American aerospace company. They…
Critical Fortinet FortiClient EMS bug under active attack (CVE-2026-21643)
A critical SQL injection vulnerability (CVE-2026-21643) in Fortinet FortiClient Endpoint Management Server (EMS), a management server for FortiClient endpoint agents on various platforms, is under…
The State of Secrets Sprawl 2026: 9 Takeaways for CISOs
Secrets sprawl isn’t slowing down: in 2025, it accelerated faster than most security teams anticipated. GitGuardian’s State of Secrets Sprawl 2026 report analyzed billions of…
Interview: Thierry Martin, head of enterprise data and analytics, Toyota Motor Europe
Thierry Martin, head of enterprise data and analytics at Toyota Motor Europe, is a man of varied talents. As he talks to Computer Weekly on…