Adversaries, both criminal and state-sponsored, are increasingly using AI to automate and scale their attacks, according to Google’s Threat Intelligence Group (GTIG). What started as relatively simple adversarial prompt injection into enterprise AI systems has become a full-blown war, with… Read More "AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns"
People are not happy about Flock Safety’s automated license plate readers and the cops that allegedly misuse them. If you’re one of those ALPR-haters, you can now take out your rage in the video game Grand Theft Auto V by… Read More "You Can Now Destroy Flock Cameras for Cash in GTA V"
After two ‘no security vulnerabilities’ bulletins in July and August, Google on Tuesday announced the release of patches for 180 vulnerabilities as part of the September 2026 Android security updates. As usual, the updates are split into two parts. The… Read More "Android’s September 2026 Updates Patch 180 Vulnerabilities"
Ravie LakshmananSep 09, 2026Vulnerability / Enterprise Security SAP has released security updates to address multiple vulnerabilities, including a maximum-severity flaw in SAP Extended Passport (EPP) Processing that could have a severe impact on the confidentiality, integrity, and availability of the… Read More "SAP Patches CVSS 10.0 Kernel Flaw Enabling Unauthenticated Remote Code Execution"
The Gigabud Android banking trojan has been equipped to clone banking apps into a separate Android work profile, giving fraudsters a way to break the link between a malware alert and the transaction that follows it. Group-IB said in research… Read More "Gigabud Uses Android App Cloning to Evade Fraud Detection"
Google on Tuesday released Chrome 153 to the stable channel with patches for 230 vulnerabilities, including an exploited zero-day. Tracked as CVE-2026-87491, the medium-severity security defect is described as an out-of-bounds write issue in Chrome’s V8 JavaScript and WebAssembly engine.… Read More "Chrome 153 Patches Seventh Zero-Day of 2026"
U.S. cybersecurity and intelligence agencies have accused China-based artificial intelligence (AI) companies of conducting “systematic extraction” of proprietary functionalities and capabilities of American frontier models through distillation attacks. The activity has been described as occurring at an industrial-scale and one… Read More "U.S. Agencies Accuse China AI Firms of Distilling Claude, GPT, Gemini, and Grok"
A team of researchers at Calif, a cybersecurity startup based in Palo Alto, California, has built a tool capable of hacking Android and iOS phones via a simple incoming call. The hacking tool, dubbed WeWorm, relies on the exploitation of… Read More "Researchers Build WeChat Zero-Click Worm Hijacking Phones via Calls"
Fortinet on Tuesday released patches for 10 vulnerabilities across its products, including critical security defects. The first critical bug, tracked as CVE-2026-84390 (CVSS score of 9.6), is described as an inclusion of sensitive information in source code issue affecting the… Read More "Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension"
Cybercriminals are hijacking artificial intelligence (AI) user accounts via information stealer logs to create “stolen keys” that grant illicit access to tools from model providers like Google, Anthropic, and others. Information stealers like Lumma Stealer or Vidar are equipped to… Read More "Infostealer Logs Expose Replayable AI Tokens That Can Bypass MFA"
