Aggregator

WhatsApp users are being targeted by a social-engineering technique called GhostPairing that can give scammers access to an account without requiring a password or one-time verification code. Instead of breaking into the service directly, the scam abuses WhatsApp’s legitimate device-linking feature and relies on a victim being persuaded to approve a new connected device. The […]

The post WhatsApp GhostPairing Lets Scammers Hijack Accounts Without Stealing Passwords appeared first on Cyber Security News.

日本计划从英伟达公司采购2.75万枚Rubin芯片，用于在本土开发机器人基础人工智能模型。周四，新成立的Noetra公司在官网宣布，将于2027年4月在英伟达的合作下启动AI计算平台的建设，并于202

JetBrains has addressed six security vulnerabilities in its software development and project management products. The affected applications include IntelliJ IDEA, TeamCity, and YouTrack. The most critical vulnerability, tracked as CVE-2026-59792, is an improper path handling (CWE-23) flaw that could allow attackers to exploit project workspace ID processing to perform path traversal and potentially execute code […]

The post JetBrains Patched 6 Vulnerabilities Across TeamCity, YouTrack and IntelliJ IDEA appeared first on Cyber Security News.

OpenAI has introduced GPT-Red, an automated safety red-teaming model trained to identify and exploit prompt injection weaknesses in AI agents. Prompt injection occurs when malicious instructions hidden in webpages, emails, local files, code repositories, or tool outputs manipulate an AI system into ignoring its intended task, potentially causing data theft, unauthorized actions, or policy bypasses. […]

The post OpenAI Unveils GPT-Red AI Model That Automatically Finds Prompt Injection Vulnerabilities appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Оказывается, «добросовестное использование» означало скачать весь YouTube, Deezer и Genius.

Kaspersky says OkoBot targets crypto users through fake software, stealing wallet files, seed phrases and passwords while recording activity inside wallet apps.

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click "Buy Now" instead. Ask a coding assistant to apply a maintainer's fix from a GitHub thread, and a fake comment can make it run a stranger's command on your computer. Neither trick hijacks the agent's task. Each one just corrupts the facts it trusts and lets it carry on with the job you

Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it

Intruder has announced the launch of AI Pentesting for web applications, providing on-demand penetration testing. Following its initial release of issue-level investigations last quarter, the platform now allows organizations to securely connect their codebases via GitHub or GitLab to automatically scope and launch penetration tests in minutes, with results and audit-ready reporting in hours. Mythos and Daybreak have proven that AI is extremely adept at finding security vulnerabilities. At the same time, AI is accelerating … More →

The post Intruder brings AI-powered, on-demand penetration testing to web applications appeared first on Help Net Security.

An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a previously unreported backdoor dubbed Stupig. Daxin ("srt64.sys"), as the kernel-mode rootkit is referred to, was first documented by Broadcom-owned Symantec in March 2022, with evidence indicating its use in targeted attacks aimed

An advanced malware previously attributed to a China-linked threat actor has resurfaced after more

Yesterday, the BSI (the German Federal Office for Information Security, or Bundesa

TuxBot v3, an AI-built IoT botnet for 17 architectures, shipped with LLM bugs and safety disclaimers the developer never removed. Palo Alto Networks’ Unit 42 identified a previously undocumented modular IoT botnet framework called TuxBot v3 Evolution, and it comes with an unusual detail: the developer used a large language model to write significant portions […]

TuxBot v3: The IoT Botnet Built With AI – Bugs, Disclaimers and All

Полгода собирали лишнее, потом объявили это заботой о безопасности – обычный день в xAI.

A vulnerability labeled as critical has been found in OpenSIPS up to 3.6.3. The affected element is the function jwt_db_authorize of the file modules/auth_jwt/authorize.c of the component JWT Handler. The manipulation results in sql injection. This vulnerability is identified as CVE-2026-25554. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in VideoLAN VLC up to 3.6.x on Android. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Remote Access Server. The manipulation of the argument user_session results in improper restriction of excessive authentication attempts. This vulnerability was named CVE-2026-26227. The attack may be performed from remote. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability identified as critical has been detected in Golioth Firmware SDK up to 0.21.x. This vulnerability affects the function Golioth_payload_as_int/Golioth_payload_as_float. Performing a manipulation results in stack-based buffer overflow. This vulnerability is identified as CVE-2026-23747. The attack can be initiated remotely. There is not any exploit available. You should upgrade the affected component.

A vulnerability labeled as problematic has been found in Golioth Firmware SDK up to 0.21.x. This issue affects the function memcpy of the component LightDB State String Parser. Executing a manipulation of the argument payload_size can lead to integer underflow. This vulnerability is tracked as CVE-2026-23748. The attack can be launched remotely. No exploit exists. The affected component should be upgraded.

A vulnerability described as problematic has been identified in Golioth Firmware SDK up to 0.21.x. The affected element is the function blockwise_transfer_init. The manipulation results in improper null termination. This vulnerability is cataloged as CVE-2026-23749. The attack must be initiated from a local position. There is no exploit available. Upgrading the affected component is recommended.