⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Adversa AI disclosed a cryptographic context injection attack that can cause xAI's Grok chatbot to leak user information including names, location, and conversation prompts to third-party websites. The attack exploits how Grok handles cryptographic context in its web interface.
A joint cybersecurity advisory released by multiple U.S. government agencies warns that threat actors are using AI-generated exploitation scripts to target exposed Siemens S7 Series PLCs across critical infrastructure sectors.Key TakeawaysUnattributed threat actors are exploiting known weaknesses and unnecessary internet exposure to conduct reconnaissance and possible pre-positioning for future disruptive attacks against Siemens S7 Series PLCs.The attackers are leveraging AI to build and refine exploit scripts faster than manual development would allow. AI use lowers the technical bar for ICS attacks in a way defenders haven't had to plan for before.There is no single patch, because there is no single flaw.
AI is making phishing attacks more personalized, convincing, and difficult for traditional email filters to detect. Kaseya explains how MSPs can monitor identity, email, and endpoint activity to detect and contain attacks that bypass the inbox.
Google Threat Intelligence Group (GTIG) is tracking three distinct suspected Russian cyber espionage threat clusters that abuse legitimate authentication flows. The clusters target individuals of interest to Russia in academia, aerospace, defense, and government sectors.
A critical security flaw in isolated-vm, a popular open-source JavaScript sandbox with over 2,900 GitHub stars, could allow attackers to escape the sandbox and execute code on the host system. The vulnerability has been assigned a CVSS score of 10.0 and has been patched in versions 6.2.0 and 7.0.1.
Citrix released updates addressing two security flaws in NetScaler ADC and NetScaler Gateway, including a critical-severity authentication bypass vulnerability. The vulnerabilities affect customer-managed NetScaler instances in hybrid deployments, but do not apply to Citrix-managed cloud services.