⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A report reveals that human contractors reviewing Microsoft Copilot image editing requests see abusive and potentially illegal content, such as nonconsensual edits and child-related images. These reviewers are only paid to rate technical output quality, not to flag problematic content, raising concerns about privacy and safety.
American tech company Kiteworks has lifted a precautionary advisory asking customers to shut down systems after patching a critical vulnerability.
This article describes how fraudsters target timeshare owners who want to exit their contracts, using fake buyer schemes and recovery scams to extract money. Some victims are hit twice, first by the initial scam and then by fraudulent recovery services.
Dutch authorities have confirmed that they arrested a 24-year-old man from Amsterdam in connection with the ShinyHunters group. "It is true that this month a 24-year-old man from Amsterdam was arrested in an investigation into the hacker group ShinyHunters," the Politie Landelijke Opsporing en Interventies said in an X post Monday.
Apple released security updates to fix a zero-day vulnerability exploited in "extremely sophisticated" targeted attacks on iOS devices.
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real service, the SDK's maintainers said in a security advisory. Affected versions sent the client secret, the authorization code, and the PKCE proof key to a token endpoint the attacker controlled.