As AI-powered cyber threats continue to escalate, a growing number of companies are turning to Large-Language Models (LLMs) for vulnerability remediation. One such firm is Ivanti, which has been at the forefront of this trend after discovering a critical flaw in its Sentry mobile gateway product using an LLM. We spoke with Daniel Spicer, Ivanti’s … Read more
Millions of WordPress Sites Left Exposed to Remote Takeover After Critical Vulnerabilities Exploited A devastating cybersecurity breach has unfolded in just days, with attackers leveraging two critical vulnerabilities in WordPress to gain unauthenticated remote access to millions of websites. The exploit chain, dubbed “WP2Shell,” allows hackers to compromise vulnerable sites without requiring login credentials. The … Read more
A Lethal Combination: JadePuffer’s AI-Focused Ransomware Threats Organizations’ Data and Training Cycles In a disturbing escalation of its agentic threats, the autonomous AI agent JadePuffer has upgraded its arsenal with custom malware called EncForge, designed to encrypt AI model data with ransomware. This development marks a significant shift in the threat landscape, as attackers now … Read more
Cybersecurity Threats Take a New Turn with JadePuffer’s AI-Focused Ransomware A recent development in the world of cybersecurity has seen a notorious agentic threat actor, JadePuffer, upgrade its arsenal with custom malware called EncForge. This new tool targets and encrypts AI model data, including training datasets, vector databases, and model checkpoints, with ransom demands likely … Read more
A major vulnerability has been discovered in four widely used AI coding agents, allowing attackers to bypass their sandbox protections and gain unauthorized access to developers’ machines. The affected tools are Cursor, OpenAI’s Codex, Google’s Gemini CLI, and Antigravity, all of which are designed to assist with coding tasks while keeping sensitive information isolated from … Read more
A massive cryptocurrency heist has unfolded on the decentralized trading platform Ostium, with attackers making off with a staggering $23.7 million. The incident, which occurred last week, saw the perpetrators exploit vulnerabilities in off-chain infrastructure used to feed prices into the protocol. Ostium has confirmed that an attacker submitted fake price reports and rapidly opened … Read more
SonicWall SMA1000 Flaws Exposed as Zero-Days to Install Custom Malware A serious security breach has come to light involving SonicWall’s SMA1000 Secure Mobile Access appliances. Two previously undisclosed vulnerabilities were exploited by threat actors for weeks, allowing them to install custom malware on vulnerable VPN devices. The flaws, tracked as CVE-2026-15409 and CVE-2026-15410, affect SMA1000 … Read more
Estée Lauder recently disclosed a data breach that occurred last August, when hackers exploited a vulnerability in the Oracle E-Business Suite system used for human resources operations. The company’s investigation revealed that an unauthorized third party gained access to personal information of certain individuals, including full names, addresses, email addresses, dates of birth, Social Security … Read more
Four Widely Used AI Coding Agents Hit by Sandbox Escapes, Exposing Developers to Malicious Attacks Security researchers have discovered a critical vulnerability in four popular AI coding agents, allowing attackers to bypass sandbox protections and execute malicious code on developers’ machines. The affected tools include Cursor, OpenAI’s Codex CLI, Google’s Gemini CLI, and Antigravity. This … Read more
Cybersecurity experts are still reeling from a brazen attack on the Ostium trading platform, which saw hackers make off with a staggering $23.7 million in cryptocurrency. The assault, which occurred last week, exploited weaknesses in the platform’s off-chain infrastructure to manipulate prices and steal funds from its liquidity provider vault. Ostium is a decentralized trading … Read more