Oct 27, 2025Ravie LakshmananArtificial Intelligence / Vulnerability Cybersecurity researchers have discovered a new vulnerability in OpenAI’s ChatGPT Atlas web browser that could allow malicious actors to inject nefarious instructions into the artificial intelligence (AI)-powered assistant’s memory and run arbitrary code.… Read More "New ChatGPT Atlas Browser Exploit Lets Attackers Plant Persistent Hidden Commands"
Oct 27, 2025Ravie LakshmananData Protection / Authentication Social media platform X is urging users who have enrolled for two-factor authentication (2FA) using passkeys and hardware security keys like Yubikeys to re-enroll their key to ensure continued access to the service.… Read More "X Warns Users With Security Keys to Re-Enroll Before November 10 to Avoid Lockouts"
Oct 27, 2025Ravie LakshmananCybersecurity / Hacking News Security, trust, and stability — once the pillars of our digital world — are now the tools attackers turn against us. From stolen accounts to fake job offers, cybercriminals keep finding new ways… Read More "WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens"
The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring January, with the number of postings on its data leak site touching a… Read More "Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack"
The newly released OpenAI Atlas web browser has been found to be susceptible to a prompt injection attack where its omnibox can be jailbroken by disguising a malicious prompt as a seemingly harmless URL to visit. “The omnibox (combined address/search… Read More "ChatGPT Atlas Browser Can Be Tricked by Fake URLs into Executing Hidden Commands"
Oct 24, 2025Ravie LakshmananData Breach / Cybercrime The threat actors behind a large-scale, ongoing smishing campaign have been attributed to more than 194,000 malicious domains since January 1, 2024, targeting a broad range of services across the world, according to… Read More "Smishing Triad Linked to 194,000 Malicious Domains in Global Phishing Operation"
Oct 24, 2025Ravie LakshmananVulnerability / Network Security Microsoft on Thursday released out-of-band security updates to patch a critical-severity Windows Server Update Service (WSUS) vulnerability with a proof-of-concept (Poc) exploit publicly available and has come under active exploitation in the wild.… Read More "Newly Patched Critical Microsoft WSUS Flaw Comes Under Active Exploitation"
Oct 24, 2025Ravie LakshmananCyber Espionage / Malware A Pakistan-nexus threat actor has been observed targeting Indian government entities as part of spear-phishing attacks designed to deliver a Golang-based malware known as DeskRAT. The activity, observed in August and September 2025… Read More "APT36 Targets Indian Government with Golang-Based DeskRAT Malware Campaign"
Oct 24, 2025The Hacker NewsCyber Resilience / Data Protection Does your organization suffer from a cybersecurity perception gap? Findings from the Bitdefender 2025 Cybersecurity Assessment suggest the answer is probably “yes” — and many leaders may not even realize it.… Read More "Why Executives and Practitioners See Risk Differently"
Oct 24, 2025Ravie LakshmananMalware / Hacking News A malicious network of YouTube accounts has been observed publishing and promoting videos that lead to malware downloads, essentially abusing the popularity and trust associated with the video hosting platform for propagating malicious… Read More "3,000 YouTube Videos Exposed as Malware Traps in Massive Ghost Network Operation"
