Cyber CrimeAI Coding Assistant Now a Ransomware Weapon
Aurora ransomware actors use Cursor Agent AI to automate post-exploitation tasks, per Gambit Security research.
> Search
30 results for “search”
Cyber Crime
Cyber CrimeNemoClaw Flaw Opens Local AI Agents to Browser-Based Attacks
A single website visit can hijack NemoClaw's local Ollama model server via DNS rebinding, according to new research.
AI & MLHow OpenAI Caught a Russian Influence Play
OpenAI dismantled a Russia-linked ChatGPT campaign fronting as a think tank with stolen research.
AI & MLA New Search Index Built for AI Agents
Former Yandex chief builds web-scale index for AI, backed by Accel's $26M seed.
SecurityAliExpress caught using inaudible audio to fingerprint browsers
Researcher discovers AliExpress using obsolete WebAudio fingerprinting; Firefox fix likely neutralizes it.
Cyber CrimeTeams Helpdesk Scam Spreads SynkLoader Backdoor
Cybercriminals are using fake IT helpdesk messages on Microsoft Teams to deliver a new backdoor malware, researchers warn.
Cyber CrimeNotion, PDFs, and PaaS: Token Theft's New Shape
Threat actor Doubloon Dredger exploits Notion and device codes to steal authentication tokens, researchers say.
SecurityDefender's Boot Driver Becomes a Kernel Weapon
Researchers show how Windows' own BTR.sys can delete security software at boot, evading blocks.
SecurityTrojan npm Packages Drop AI-Powered Linux Backdoor
Researchers uncover 14 malicious npm packages delivering RedC2 4.0, an AI-assisted Linux backdoor, via stealthy loader.
SecurityGrok tricked into leaking user data
A researcher found that encrypting malicious instructions lets Grok exfiltrate user chats and personal details.
Cyber CrimeMalicious Firefox Add-ons Target Web3 Wallets
Researchers found 40 malicious Firefox extensions impersonating Web3 products to steal wallet secrets.
Cyber CrimeCheap Criminal AI Service Resells Bypassed Models
Researchers find Kriminal AI service routes requests through Grok, Claude, and others via jailbreaks for as little as $12.99 a month.
CloudMicrosoft 365 search outage linked to deployment bug
Microsoft is fixing a deployment issue causing search failures in Outlook, SharePoint, and OneDrive.
SecurityRansomware in VMware Attack Looks Like a Distraction
Researchers say a suspected China-nexus APT used a VMware flaw to deploy ransomware as a smoke screen.
SecurityAmnesiaStealer Browser Hijack Raises Stakes for macOS
New macOS infostealer AmnesiaStealer combines credential theft with silent remote browser control, researchers report.
SecuritySalesforce and ServiceNow attacks expose new API risks
Researchers say ‘City-Forum’ campaign targets Salesforce and ServiceNow, possibly tied to ShinyHunters.
Cyber CrimeExfilSquad Leak Analysis Confirms 13 Victims
Fortra researchers verified ExfilSquad's access to sensitive data from 13 organizations, likely via misconfigured Power Pages portals.
SecurityAmnesiaStealer: New macOS Malware Shows Depth
Researchers have uncovered a new macOS infostealer that uses ClickFix social engineering and has stealthy remote browser control capabilities.
SecuritySCCM Attack Chain Exposes Cost of Weak Trust
XM Cyber researchers chain four SCCM flaws into SYSTEM access for $58, with partial fixes leaving a path open.
SecurityGoogle Doc Credentials Leak Serves as a Cautionary Tale
A developer's habit of storing passwords in a shared Google Doc led to a search-indexed exposure of staging credentials.
SecurityPatch Bypass Threatens Defender
A researcher's PoC bypasses Microsoft's Defender patch, granting system-level access to attackers with initial foothold.
SecurityPlug and Pwn attacks exploit Windows PnP for SYSTEM
Researchers show fake USB devices can trigger Windows to install vulnerable vendor software, granting SYSTEM privileges.
SecurityStealthy Guest-Access Attacks Hit Salesforce, ServiceNow
Researchers uncover 'City-Forum' campaign using a custom toolset to exploit unauthenticated guest access in Salesforce and ServiceNow.
Tech NewsWindows 11 updates ship with typo-aware search fixes
Microsoft's August 2026 Patch Tuesday brings mandatory updates for Windows 11, adding security fixes and new features like Voice Isolation.
SecurityAI-Assisted SharePoint Exploit Reaches Unauthenticated RCE
Researchers chain AI-found flaws to gain admin on SharePoint servers, bypassing authentication entirely.
SecurityHostile SIMs exploit spec-compliant commands
Malicious SIM cards can force phones to leak files, drop to 2G, or crash—by abusing standard SIM commands.
SecurityGray to White: A Hacker's Redemption Arc
Marcus Hutchins, who halted WannaCry, recounts his path from malware author to security researcher.
SecurityPasskey Defenses Undermined by Weak Surroundings
Recent research shows passkey protections can be bypassed without breaking the underlying cryptography.
AI & MLAI Research Gets a Human Amplifier
PortSwigger's HTTP Terminator, guided by a human, finds novel vulnerability classes and hundreds of live targets.
SecurityNatJack Challenges NAT Security Trust
New research reveals how the NatJack attack class exploits fundamental design flaws in NAT, bypassing standard network protections.