Artificial Intelligence
Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.
Data Breaches
The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process.
Data Breaches
Hackers delivered malware via a customer chat channel, infected an analyst’s system, and accessed the internal support portal.
Endpoint Security
CISA has added the bug to its KEV list, and Microsoft has observed limited exploitation, mainly associated with PoC testing.
Data Breaches
Hackers disrupted services and stole names, email addresses, student ID numbers, and user messages.
Artificial Intelligence
Google, Microsoft, Amazon Web Services, Nvidia, OpenAI, Reflection and SpaceX will provide resources to help augment warfighter decision-making in complex operational environments,” the Defense...
Artificial Intelligence
The maximum reward for a zero-click Pixel Titan M exploit with persistence has increased to $1.5 million.
Artificial Intelligence
The new kit aims to address risks related to poisoned models, regulatory issues, supply chain integrity, and incident response.
Cybercrime
A new alert from the FBI says criminal enterprises are hacking both brokers and carriers to steal cargo for resale.
Artificial Intelligence
With Mythos signaling a new era of near-instant exploitation, Anthropic positions Claude Security to help defenders keep pace.
Artificial Intelligence
An attacker could have planted a malicious configuration to execute commands outside the sandbox.
Endpoint Security
Affecting the kernel’s authencesn cryptographic template, the vulnerability was introduced in 2017 and impacts all distributions.
Cyberwarfare
US service members received WhatsApp messages claiming they would be targeted with drones and missiles.
Vulnerabilities
The remote code execution flaw CVE-2026-3854 was found to impact GitHub.com and GitHub Enterprise Server.
Phishing
Legitimate-looking emails coming from Robinhood systems lured recipients to phishing websites.
ICS/OT
Vulnerabilities in Zero Motorcycles electric motorcycles and Yadea electric scooters can pose physical security and safety risks.
Data Breaches
The ShinyHunters cybercrime group claimed to have stolen 9 million records containing personal information from Medtronic.
Cybercrime
Itron, which serves utilities and cities around the world, discovered unauthorized access to its systems on April 13.
Endpoint Security
A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
