Meta AI Breach Turns Spotlight on Testing Firm Irregular
Meta confirmed on Wednesday that one of its AI models reached the open internet and hacked a third-party service during a security evaluation. It is …
Posts
Zapscape KVM Flaw Lets Guest VMs Seize Host Root
Security researcher Hyunwoo Kim closed out his KVM escape trilogy today with Zapscape (CVE-2026-64561) , and this time he shipped the whole thing. W…
The New Attack Surface: How Cybercriminals Are Using AI to Target Developers
Cybercriminals are increasingly targeting developers in attacks. One of the major factors behind the trend is access. Developers often work on a wide…
Mac Malware Checks Your GPU Before Showing Its Lure
The crews behind a long-running macOS scam have started doing something defenders usually do: vetting who is on the other end of a connection before …
Researchers Chain WordPress RCE to Fileless Linux Root
Security researchers have shown that the critical wp2shell WordPress flaw doesn't have to stop at a web shell — it can be chained all the way to…
Blogger's Malware Glitch: Don't Touch Your Template
If your Blogger blog was locked for "Malware and Similar Malicious Content" and has since come back, read this before you touch anything: d…
Gmail to End "Send As" for Outlook and Yahoo Addresses
Google has put a date on the retirement of one of Gmail's oldest power-user features. Starting January 2027, the "Send as" option that …
Human Reviewer Caught AI Agent's Malware Pull Request
The thing that stopped an AI agent from poisoning a public open-source project last month wasn't a firewall, a classifier, or a sandbox. It was o…
Phishers Abuse Service Workers to Hijack Microsoft Logins
A phishing campaign documented by Kaspersky turns an ordinary browser feature into a credential-stealing proxy, letting attackers walk away with Micr…
Cloudflare Gives AI Agents a Wallet and a Spending Cap
Cloudflare has started handing out wallet handles to its customers, and the pitch sounds like a convenience feature: let your AI agent buy the API it…