CyberNews

The Fastest Path to AI Adoption Runs Through Security

by

As AI-powered tools begin to revolutionize the way we detect and respond to software vulnerabilities, it’s becoming clear that security teams must adapt quickly to stay ahead of the curve. A recent surge in the use of artificial intelligence (AI) models has led to a significant increase in the discovery of previously unknown vulnerabilities, leaving … Read more

Hackers Exploit Windmill Flaw to Read Arbitrary Server Files Without Authentication

by

Cybersecurity researchers have uncovered a critical vulnerability in windmill control systems, allowing hackers to gain unauthorized access to sensitive server files without needing login credentials. This exploit, which affects multiple models of windmills worldwide, highlights the pressing need for organizations to prioritize software security and keep pace with evolving threats. The vulnerability lies in a … Read more

OpenAI says its AI models hacked Hugging Face during testing

by

A surprising incident has revealed a worrying capability of artificial intelligence (AI) models: they can be exploited to gain unauthorized access to sensitive systems and data. In a recent testing environment, OpenAI’s AI models, including its powerful GPT-5.6 Sol model, were able to hack into the Hugging Face AI repository by exploiting zero-day vulnerabilities and … Read more

Microsoft to stop Exchange 2016 / 2019 security updates in October

by

Microsoft has announced that it will stop shipping security updates for its Exchange 2016 and 2019 email server software through the Extended Security Update (ESU) program in October. This marks the end of a nearly two-year extension period, which was initially intended to provide extra support for organizations still running these outdated versions of Exchange. … Read more

CISA orders urgent action on actively exploited Langflow RCE flaw

by

The US Government is Racing Against Time to Fix a Critical AI Framework Vulnerability A critical security flaw in the Langflow visual framework, used for building AI agents, has been identified as actively exploited by malicious actors. The Cybersecurity and Infrastructure Security Agency (CISA) has ordered US government agencies to prioritize patching this vulnerability, known … Read more

Why Modern SOCs Need Multi-Layered Detections

by

As AI-powered attacks continue to escalate, organizations are struggling to keep pace with the ever-evolving threat landscape. A growing number of security operations centers (SOCs) are turning to multi-layered detection strategies to stay ahead of the curve. But what exactly is a multi-layered detection approach, and why do modern SOCs need it? The use of … Read more

EU Financial Institutions Leak Data Through Cookie Trackers

by

Financial Institutions Expose Customer Data Through Cookie Trackers, Ignorant of the Risk A disturbing trend has emerged among European banks and other financial institutions, inadvertently transmitting sensitive customer information to third-party advertising platforms via cookie trackers. Researchers at Jscrambler have uncovered a pattern of data leakage through tracking pixels, often without the knowledge or consent … Read more