A critical security flaw has been disclosed in LangChain Core that could be exploited by an attacker to steal sensitive secrets and even influence large language model (LLM) responses through… Read More »Critical LangChain Core Vulnerability Exposes Secrets via Serialization Injection
It’s getting harder to tell where normal tech ends and malicious intent begins. Attackers are no longer just breaking in — they’re blending in, hijacking everyday tools, trusted apps, and… Read More »ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More Stories
The encrypted vault backups stolen from the 2022 LastPass data breach have enabled bad actors to take advantage of weak master passwords to crack them open and drain cryptocurrency assets… Read More »LastPass 2022 Breach Led to Years-Long Cryptocurrency Thefts, TRM Labs Finds
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a security flaw impacting Digiever DS-2105 Pro network video recorders (NVRs) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of… Read More »CISA Flags Actively Exploited Digiever NVR Vulnerability Allowing Remote Code Execution
Fortinet on Wednesday said it observed “recent abuse” of a five-year-old security flaw in FortiOS SSL VPN in the wild under certain configurations. The vulnerability in question is CVE-2020-12812 (CVSS… Read More »Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability
Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that’s delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app… Read More »New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
The fraudulent investment scheme known as Nomani has witnessed an increase by 62%, according to data from ESET, as campaigns distributing the threat have also expanded beyond Facebook to include… Read More »Nomani Investment Scam Surges 62% Using AI Deepfake Ads on Social Media
Every year, cybercriminals find new ways to steal money and data from businesses. Breaching a business network, extracting sensitive data, and selling it on the dark web has become a… Read More »Attacks are Evolving: 3 Ways to Protect Your Business in 2026
The U.S. Securities and Exchange Commission (SEC) has filed charges against multiple companies for their alleged involvement in an elaborate cryptocurrency scam that swindled more than $14 million from retail… Read More »SEC Files Charges Over $14 Million Crypto Scam Using Fake AI-Themed Investment Tips
Apple has been fined €98.6 million ($116 million) by Italy’s antitrust authority after finding that the company’s App Tracking Transparency (ATT) privacy framework restricted App Store competition. The Italian Competition… Read More »Italy Fines Apple €98.6 Million Over ATT Rules Limiting App Store Competition