The AI child exploitation crisis is here

The National Center for Missing and Exploited Children said it received over a million reports tied to AI-generated child ...

Blizzard squashes major World of Warcraft XP exploit less than an hour before the MMO's Midnight early access begins, sending power levelers back to the drawing b…

Midnight early access has begun, and everybody's working their way to level 90. Ahead of the release, a major exploit seemed ...
New York Magazine

The AI-Powered Hacking Spree Is Here

A hacker exploited Anthropic PBC’s artificial intelligence chatbot to carry out a series of attacks against Mexican ...

Inside the story of the US defense contractor who leaked hacking tools to Russia

The former boss of a U.S. hacking tools maker was jailed for selling highly sensitive software exploits to a Russian broker. This is how we first learned of his arrest, reported the story, and some ...
The Hacker News

CISA Flags Four Security Flaws Under Active Exploitation in Latest KEV Update

CISA adds four actively exploited vulnerabilities to its KEV catalog, including Chrome RCE, Zimbra SSRF, Windows ActiveX, and ...
Gulf News

Microsoft urgent patch: Hackers exploit critical Windows and Office vulnerabilities

Six zero-day flaws being exploited are now patched — users urged to update immediately Microsoft’s Patch Tuesday release addresses roughly 60 vulnerabilities overall. Microsoft has confirmed that ...
CoinTelegraph

Saga pauses chainlet after $7M exploit that depegged its stablecoin

Saga’s US dollar-pegged stablecoin has dropped to $0.75, while the protocol's total value locked has fallen by around 55% over the past 24 hours. Layer-1 blockchain protocol Saga has paused its ...
Ars Technica

A single click mounted a covert, multistage attack against Copilot

Microsoft has fixed a vulnerability in its Copilot AI assistant that allowed hackers to pluck a host of sensitive user data with a single click on a legitimate URL. The hackers in this case were white ...
CSOonline

Hackers exploit Microsoft OAuth device codes to hijack enterprise accounts

Cybercriminals and state-sponsored hackers are increasingly exploiting Microsoft’s legitimate OAuth 2.0 device authorization process to hijack enterprise accounts, bypassing multifactor authentication ...
Forbes

Cisco Secure Email Attacks: 0-Day Exploit Confirmed, No Fix Available

“There are no workarounds identified that directly mitigate the risk concerning this attack campaign,” is not what you want to read, having just been informed of a zero-day exploit concerning a Common ...
Bleeping Computer

Hackers exploit newly patched Fortinet auth bypass flaws

Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to admin accounts and steal system configuration files. The two vulnerabilities ...
Bloomberg L.P.

North Korea Suspected of $30 Million Crypto Hack, Yonhap Says

North Korean hacking group Lazarus is suspected of being behind an exploit that saw 45 billion won (about $30 million) drained from South Korea’s largest crypto exchange Upbit on Thursday, Yonhap News ...