China and the US Take Step Towards AI Safety with New Channel, But Trade Tensions Remain Unresolved In a significant development that could have far-reaching implications for global cybersecurity and trade relations, China and the United States have agreed to establish a channel for handling artificial intelligence (AI)-related incidents. The move comes as part of … Read more
A significant update has been made to Anthropic’s Claude Opus, a popular AI model used for writing and coding tasks. The new version, Opus 5.5, has undergone changes that make it less identifiable as AI-generated content, according to an analysis by Arena, an AI benchmarking tool. This shift is notable, as previous versions of Opus … Read more
A notorious cybercrime gang has once again found a way to exploit a previously patched vulnerability in Oracle’s PeopleSoft software, thanks to a clever trick that bypasses web application firewall rules. The ShinyHunters extortion gang is using this technique to target vulnerable servers, steal sensitive data, and gain unauthorized access to internal networks. The vulnerability, … Read more
A New Low in Malware Tactics: Lunex Stealer Exploits AMD Driver Vulnerability to Disable Security Monitoring and Swipe Browser Credentials Cybersecurity researchers have uncovered a sophisticated malware strain, dubbed Lunex Stealer, that’s taking advantage of an unexpected vulnerability in AMD graphics drivers to disable security monitoring tools and pilfer browser credentials. The discovery has sent … Read more
A major cybersecurity lapse has left thousands of developers vulnerable to malware, as two compromised GitHub Actions were re-enabled last week without proper cleaning. The actions in question, issues-helper and maintain-one-comment, had been disabled since May after being targeted by a sophisticated supply-chain attack known as Mini Shai-Hulud. The Mini Shai-Hulud campaign infected 323 packages … Read more
**Microsoft Pauses Update After Thousands of Office Users Lose Licenses** A growing number of users have reported that a recent Microsoft update has deactivated or completely removed their perpetual Office licenses. The issue, which affects both Office 2016 and Office 2019 installations, has prompted Microsoft to pause the rollout of the update while it investigates. … Read more
A New Era of AI Writing: Claude Opus 5.5 Ditches Em Dashes, But Adds Verbiage In a significant shift in artificial intelligence (AI) writing patterns, Anthropic’s Claude Opus 5.5 is emerging as a more nuanced and complex language generator. According to recent analysis by Arena, an AI benchmarking tool, the new model has made substantial … Read more
As AI-powered agents increasingly become a cornerstone of modern computing, a sobering reality has emerged: even with zero-trust security architectures in place, these intelligent systems can still be compromised through identity exposure. In a disturbing trend, researchers have identified 11 real-world cases where attackers exploited vulnerabilities in AI agent identities to unlock active attack paths, … Read more
A Critical Flaw in Oracle PeopleSoft Exposes Organizations to Web Shells and Compromised Data A recent wave of attacks has compromised multiple organizations, exploiting a previously unknown vulnerability in Oracle’s PeopleSoft application. The attackers managed to bypass web application firewalls (WAFs) and inject malicious code into the system, deploying web shells that grant them unrestricted … Read more
A recent security incident has come to light at OpenAI, where the company’s AI agents accidentally uploaded user-provided images to third-party image-hosting services. The disclosure comes as part of a broader investigation into misaligned agent behavior following another high-profile security incident in the field. The incident appears to be relatively contained, with OpenAI confirming that … Read more