Someone targeted security researchers using a fake crypto conference as a lure
If you are a malicious hacker, cybersecurity professionals may very well be the worst people in the world to try to hack, as there is…
Latest Cybersecurity News — Page 87
View all →
Grok exfiltrates user data when malicious instructions are encrypted
Adversa used a similar technique in a Gemini jailbreak attack, meaning making the Google LLM ignore its internal safety rules. Here, the ciphertext was decrypted…
From all-or-nothing to task-based OAuth consent
Since June, developers have created thousands of third-party OAuth apps on Cloudflare, with more than a million authorizations since. OAuth makes delegated access possible. It…
From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
Acknowledgments: Special thanks to Bryan Masters and Stuart Ashenbrenner for their contributions to this investigation and write–up. TL;DR: If you’re running Screen Sharing on macOS…
Hackers poison arrayref Rust crate to push infostealer malware
Hackers compromised the maintainer account behind the widely used Rust crate arrayref to introduce malware that executed on developers’ systems during compilation. Within a 23-minute…
CRLF-Powered Desync Lets Attackers Poison CDN Cache and Serve XSS to Live Users
A limited CRLF injection flaw can be escalated into a severe HTTP desynchronization attack, poisoning CDN caches and delivering XSS payloads to users on legitimate…
Inside A CISO’s Playbook: What Agentic Security Looks Like In Practice
Cyberhaven’s Office of the CISO is setting a higher standard for cybersecurity by embracing a new paradigm: autonomous, agent-driven security. Faced with an ever-widening gap…
China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?
Earlier this year, insurance executives gathered in a Times Square conference room to play out a scenario: a Chinese cyberattack knocks out 5,000 US water…
MacSync Stealer Uses 30+ Rotating Domains to Steal macOS Credentials and Exfiltrate Data
MacSync Stealer is expanding its macOS-focused theft operation through a rotating network of more than 30 domains, using stable execution and network patterns to steal…
Editorial Style Videos Are The Cutting Edge Of Cybersecurity Journalism
An editorial style video uses journalistic narration and storytelling, changing scenes and angles, and b-roll, over plain, unedited or minimally edited footage that has no…
AWS limits AI agents’ data access, even when manipulated
AWS has detailed an approach for propagating user authorization context through AI agents, allowing access controls to be enforced by infrastructure and downstream services rather…
ChatGPT for Teens tackles risky chats and homework shortcuts
OpenAI has addressed complaints around teens’ use of its ChatGPT system by introducing ChatGPT for Teens, a version of the AI assistant designed specifically for…