GuardBreaker: Derailing AI-assisted malware analysis with a code comment
LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor 10 Sep 2026 • , 4 min.…
Latest Cybersecurity News — Page 95
View all →
Metasploit Wrap Up: This One Goes to Sixteen!
This One Goes to Sixteen! Another banger from Metasploit with sixteen new modules, including ten exploit modules, with five on the CISA KEV list. Cisco,…
Update your firewall rules: Teams and Copilot are changing address
Enterprises that had been blocking the new Copilot address to prevent employees accessing their personal Microsoft accounts can use Microsoft’s TenantRestrictions control to achieve their…
Boston Scientific restores operations after cybersecurity incident disrupts order fulfillment
Following its August cyber disruption, medical equipment manufacturer Boston Scientific revealed this week that manufacturing, order fulfillment and shipping operations have been fully restored following…
EU Cyber Resilience Act reporting rules take effect, putting vulnerability disclosure and product security in focus
The European Union’s Cyber Resilience Act (CRA) is set to come into force with mandatory cybersecurity requirements for manufacturers of hardware and software products with…
CrushFTP vulnerability CVE-2024-4040: what you need to know
On April 19, 2024, CrushFTP, a managed file transfer vendor disclosed a 0day vulnerability in several versions of its software through a private mailing list.…
WARMCOOKIE One Year Later: New Features and Fresh Insights
Revisiting WARMCOOKIE Elastic Security Labs continues to track developments in the WARMCOOKIE codebase, uncovering new infrastructure tied to the backdoor. Since our original post, we…
Artifactory flaws chained in attacks deploying backdoor malware
Threat actors are exploiting critical and high-severity vulnerabilities in JFrog Artifactory to bypass authentication, gain administrative privileges, and deploy a Rust backdoor on vulnerable self-hosted…
Russia-Aligned Hackers Use GuardBreaker Prompt Injection to Disrupt AI Malware Analysis
Russia-aligned operators are testing a new way to make artificial intelligence overlook malicious code. The technique, called GuardBreaker, hides a safety-sensitive request inside an otherwise…
Researchers Uncover 10,000+ Malware Loaders Behind YouTube and SEO Poisoning Campaign
A long-running pay-per-install (PPI) operation that used YouTube gaming channels and SEO-poisoned software downloads to distribute malware at scale. The cluster, tracked as CL-CRI-1171, is…
Digital Executive Protection: Agentic Powered External Identity Security
External identity is the personal data of executives, employees, and their families that attackers can find and exploit outside company systems. VanishID is tackling that exposure across…
IDScan confirms breach after 153 million driver’s licenses leak on dark web
Days after reports linked IDScan to a dark web database holding more than 153 million driver’s license scans, the identity verification company has confirmed hackers…