Cybersecurity
Cybersecurity
Microsoft sounds the alarm on AI Recommendation Poisoning
Microsoft warns of AI Recommendation Poisoning targeting AI assistants
Attackers inject hidden instructions into AI memory to bias results
Real world attempts have...
Cybersecurity
Thousands of Volvo North America employees caught in widening Conduent data breach
17,000 employees, customers, and staff at Volvo North America were affected by the Conduent breach.
Hackers were inside Conduent’s systems for over two...
Cybersecurity
Why Civil Society Says Swiss Data Retention Plans Go Too Far
Civil society groups say expanded data retention would violate fundamental rights
VPNs, messaging apps, and social platforms could be forced to store user...
Cybersecurity
Unit 42 Warns of On Demand Phishing Pages Powered by Legitimate LLM APIs
Attackers can use LLM APIs to generate phishing pages in real time inside a victim’s browser.
Each victim may see a different JavaScript...
Cybersecurity
CrowdStrike and Nord Security bring Falcon protection into NordLayer for SMBs
CrowdStrike Falcon Go and Falcon Enterprise are being integrated into NordLayer for SMB customers.
The bundle combines endpoint protection with business VPN and...
Cybersecurity
Microsoft Adds Another Security Shield to Teams, This Time for Fake Brand Calls
Microsoft Teams will warn users about possible brand impersonation calls from first time external callers.
Users will be able to accept, block, or...
Cybersecurity
FortiGate firewalls targeted in automated account creation and data theft campaign
Attackers are exploiting a FortiGate SSO weakness to create rogue admin accounts.
They are stealing firewall configuration data, likely using automation.
FortiOS 7.4.10...
Cybersecurity
Hackers Found a New Way to Trick Gemini Through Calendar Invites
Researchers found a prompt injection method that used Google Calendar invites to manipulate Gemini.
Attackers could hide instructions inside event details to make...
Cybersecurity
Hacker flaunts stolen government data on Instagram
Nicholas Moore pleaded guilty to repeatedly hacking the US Supreme Court’s electronic filing system.
New court filings say he also accessed AmeriCorps and...
Cybersecurity
Hackers are exploiting a critical WordPress flaw in Modular DS
Modular DS versions 2.5.1 and older have a critical security flaw
Attackers can bypass authentication and gain admin access remotely
The issue is...
Cybersecurity
Pax8 data exposure puts thousands of MSP relationships under scrutiny
Pax8 accidentally emailed a spreadsheet containing sensitive partner and customer business data.
Around 1,800 MSPs were affected through a file shared with fewer...