A group of academics from VUSec and Scuola Superiore Sant’Anna have disclosed details of a new Spectre CPU vulnerability variant that affects Just-In-Time (JIT) engines present in web browsers, language… Read More »New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The malicious packages abuse the ‘Baileys’… Read More »101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown. “During the shutdown,… Read More »Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. “It is true that this month a 24-year-old man from Amsterdam was… Read More »Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation
OpenAI said it has made the decision to pause training of its most powerful models after one of its agents during reinforcement learning (RL) training contacted an external chatbot by… Read More »OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot
OpenAI on Monday shelved plans to release GPT-6.1 Astra, a next-generation artificial intelligence (AI) model that was planned for an October launch, after it failed internal safety and alignment audits.… Read More »OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK’s… Read More »Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they had already breached, Microsoft said in a technical analysis. The malware has been seen in a… Read More »Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks
Apple has released security updates to address a vulnerability in older versions of iOS, iPadOS, and macOS that it said may have been exploited in targeted attacks. The vulnerability, tracked… Read More »Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks
RatHat’s operators build and publish the Android banking trojan and control infected phones from a web console, according to security company Cleafy. Cleafy has traced nearly 100 deployments of that console since… Read More »RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims