Cyber Crimen0n's AI habit cost $7K, leaked its playbook
A newcomer extortion crew used AI to script attacks on 23 organizations, then left its own server wide open for researchers to read.
> Search
30 results for “search”
Cyber Crime
SecurityAWS AgentCore Flaw Let One Prompt Hijack All Agents
Researchers say a single chat prompt could extract cloud credentials and let an attacker take over every AgentCore agent in an AWS account and region.
AI & MLAI Training Gap Tests Governance
ISACA research shows 32% of digital trust professionals say their organizations fail to address AI risks, as adoption climbs.
SecurityNvidia Bug Leaves GPU Metrics Exposed
Researchers found thousands of GPU servers leaking monitoring data online, with some vulnerable to a high-severity flaw.
AI & MLOpenAI Firings Draw Safety Culture Alarm
Three dismissed OpenAI safety researchers deny misconduct and say the way their exits were handled is chilling internal debate.
Cyber CrimeFake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
Cyber CrimeUS Puts $10M Bounty on Hafnium Hacker
The State Department is offering up to $10 million for information on Zhang Yu, accused of COVID-19 research theft and the Hafnium Exchange campaign.
CloudAWS Agent Flaws Expose Control Gap
Repeated AWS agent security fixes that later resurfaced show the tension between agent autonomy and isolation, researchers say.
Tech NewsWindows 11 Search Gets a Long-Awaited Overhaul
Microsoft is rebuilding Windows 11 search on WinUI 3 for speed and lower RAM use, adding inline previews and 'actions' to change settings right from the search box.
SecurityCISO Data: Cyber Risk Moves Into Workflow
Five years of Voice of the CISO research show risk shifting from the perimeter to the flow of daily work, with AI governance and human risk at the center.
SecurityPwn2Own Ireland Day One Yields 32 Zero-Days
Researchers exploited 32 zero-days at Pwn2Own Ireland 2026, targeting phones, printers, smart home hubs and AI infrastructure for $388,500.
SecurityFake Zoom Installer Delivers macOS Backdoor
Researchers at Jamf say a bogus Zoom app installs CloudSyncD, a backdoor that abuses user passwords to run with root privileges.
SecurityAI Agents' Hack Attempts on Gov Sites
Research lab Transluce reports autonomous AI agents tried SQL injection and other probes against U.S. and Canadian government websites.
Cyber CrimeDIVD breach linked to agentic AI attack
Dutch bug-hunting nonprofit says AI agents exploited Zammad zero-days, stealing researcher emails in seconds.
SecurityTeen's Auth Flaw Opened Titan's Data Vault
A 16-year-old researcher bypassed Microsoft's Titan analytics by exploiting an unverified JWT and was paid a $5,000 bounty.
AI & MLAI Doomsday Scenarios Face Skeptics
Researchers debate whether AI's catastrophic risks are real threats or marketing, from nuclear war to bioweapons and runaway models.
SecurityRogue MFA Provider Can Siphon Passwords
Researchers show how a compromised Entra admin account can turn a trusted external MFA provider into a credential-stealing prompt.
Cyber CrimeFake Twilio npm Probe Hid Credential Theft
Researchers say a package posing as an authorized Twilio bug-bounty probe went through 11 versions before trying to exfiltrate API credentials.
AI & MLAI malware cuts humans out of C2 loop
Cisco Talos says it has identified CLOSEDQUORUM, a proof-of-concept implant that uses an LLM panel to drive an attack without a live operator.
Cyber CrimeStolen Passwords Expose 1,787 Water Providers
SpyCloud research finds infostealer malware has harvested credentials tied to 1,787 U.S. water and wastewater organizations, some reaching operational networks.
Cyber CrimeDefender zero-day halts antivirus updates
A researcher's new Windows Defender zero-day prevents signature and platform updates, the latest in a string of exploits tied to a dispute with Microsoft.
Cyber CrimeSideCopy Expands Targeting to Indian Academia
Trellix researchers detail a spear-phishing chain abusing mshta.exe and a spoofed document shortcut to deliver the ReverseRAT trojan to academic institutions.
SecurityMeta Muse flaw widens local attack surface
Researcher says a local attacker can redirect Meta's Muse dictation traffic through an undocumented app setting, with no special privileges.
AI & MLWorld model labs keep plans under wraps
A conference panel on world models revealed that leading labs avoid discussing products or timelines, citing competitive risk.
SecurityAI-Crafted Exploit Chain Hit OpenAI Code
Researchers chained an ImageMagick flaw with an OpenAI sign-in issue to reach internal code, earning a bounty.
SecurityFour Kernel Flaws, Public Exploits, One Fix
A researcher published working local-root exploits for four Linux kernel bugs fixed weeks earlier, flagging a patching race for older systems.
AI & MLAI Watermarks Can Weaken Model Safety
New research finding watermarking alters model behavior, including refusal of harmful requests and tool calling.
SecurityClick2Shell Turns Admin Clicks Into Theme Installs
A new WordPress core flaw lets a crafted link silently install a theme, and researchers chained it to full code execution.
Cyber CrimePlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
AI & MLOpenAI Details AI Models Going Rogue
OpenAI's new misalignment framework reveals models that searched GitHub for leaked keys and fabricated data during training.