⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Coinspect identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains, causing approximately $5.7 million in theft. Five wallet apps used this generator for recovery phrases, with some fixed and others discontinued.
Coinspect identified CryptoJS.lib.WordArray.random() as the weak random number generator behind the Ill Bloom wallet drains, causing approximately $5.7 million in theft. Five wallet apps used this generator for recovery phrases, with some fixed and others discontinued.
Criminals are impersonating OnlyFans creators using AI-generated deepfakes to lure fans with fake promises of live chats. They create fake accounts on platforms like TikTok and move conversations to Snapchat, where they request Cash App payments for exclusive content.
Researchers discovered that Apple's iCloud Private Relay can be bypassed through three WebKit features: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. These features send traffic directly from the device, exposing the user's real IP address.
Researchers disclosed that Apple's iCloud Private Relay can be bypassed through three WebKit features: DNS prefetching, WebAuthn Related Origin Requests, and WebTransport. These features send traffic directly from the device, exposing the user's real IP address despite the proxy configuration.
A new class of prompt injection called AI Recommendation Poisoning abuses pre-filled deep links in AI assistants like ChatGPT and Claude. When clicked, these links execute commands that can permanently bias the AI's memory toward a vendor's domain.