CyberNews Chick-fil-A has revealed that a recent wave of credential stuffing attacks compromised the personal data of over 13,000 customers. The company confirmed that the attackers targeted its website and mobile app between June 17 and June 19, using automated tools and stolen credentials to gain unauthorized access to customer accounts. The breach affected Chick-fil-A One … Read more
Massive Microsoft 365 Outage Caused by Maintenance Bug, Leaving Thousands Disrupted A devastating outage hit Microsoft’s popular productivity suite, Microsoft 365, leaving thousands of users unable to access their critical services. The disruption was caused by a maintenance bug that mistakenly removed IP routes from more devices than intended, disrupting network traffic and affecting Azure … Read more
Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft’s Servers, Leaving Thousands Exposed A serious vulnerability has been discovered in Bing Images, allowing attackers to craft malicious SVG files that can execute commands with elevated privileges on Microsoft’s servers. The flaw, which was uncovered by a security researcher, affects thousands of users … Read more
A Critical Flaw in ChatGPT’s Authentication System Puts Users at Risk of Rogue Workspace Agents Deployment via Phishing Links Cybersecurity researchers have uncovered a significant vulnerability in the authentication system of ChatGPT, an AI-powered chatbot widely used for customer support and other business applications. The flaw, discovered by experts at Zimperium, could allow attackers to … Read more
A Critical Active Directory Exploit Puts Organizations at Risk of Domain Controller Impersonation A recently discovered exploit, dubbed Certighost, has left many organizations vulnerable to a sophisticated attack that can deceive even the most secure systems into thinking a low-privileged user is actually a domain controller. This means that an attacker could gain elevated access … Read more
A trio of highly skilled and secretive threat actors, known only by their moniker “Kimi K3,” have been discovered exploiting two previously unknown vulnerabilities in Redis, a popular open-source in-memory data store widely used across industries. According to researchers from a leading security firm, these zero-day exploits were specifically crafted to gain remote code execution … Read more
A Critical Vulnerability Patched: NodeBB’s AI-Assisted Flaw Discovery Highlights Importance of Proactive Security Measures NodeBB, an open-source forum software used by millions worldwide, has patched eight critical vulnerabilities that could have allowed attackers to gain administrator access and intercept private chats. The flaws were discovered using artificial intelligence (AI) models designed to identify potential security … Read more
A new wave of malware attacks is sweeping across the globe, courtesy of an old foe that’s been reinvigorated with cutting-edge technology. Golden Chickens, a notorious group known for its innovative and modular approach to cybercrime, has resurfaced with four new families of malware and a range of implantable devices designed to evade detection. Golden … Read more
A rogue AI agent, Hermes, was left unattended on a computer system at Thailand’s Ministry of Finance, allowing hackers to exploit vulnerabilities and gain unauthorized access to sensitive data. The incident highlights the potential risks associated with advanced technologies like artificial intelligence (AI) in cybersecurity. The Ministry of Finance confirmed that an unauthorized third party … Read more
As AI-powered tools become increasingly integral to the cybersecurity landscape, a disturbing trend is emerging: organizations are mistakenly relying on the mere presence of artificial intelligence (AI) agents for security, rather than enforcing strict controls over their actions. This oversight leaves companies vulnerable to exploitation, as these AI-driven systems can inadvertently perpetuate software vulnerabilities or … Read more