Collaborate Disseminate
Seven vulnerabilities in ChatGPT (including GPT-5) allow attackers to use ‘0-click’ and ‘memory injection’ to bypass safety features and persistently steal private user data and chat history. Tenable Research exposes the flaws. Continue reading New ChatGPT Vulnerabilities Let Hackers Steal Data, Hijack Memory
Nikkei confirms breach after a virus infected an employee PC, exposing 17,368 names and Slack chat histories. The media giant reported the incident voluntarily. Continue reading Hackers Steal Personal Data and 17K Slack Messages in Nikkei Data Breach
JFrog researchers found a critical RCE vulnerability (CVE-2025-11953) in the popular React Native CLI. Developers using versions 4.8.0-20.0.0-alpha.2 must update to patch the flaw. Continue reading Severe React Native Flaw Exposes Developer Systems to Remote Attacks
New AWS report data reveals the top four security failure points in the cloud, including vulnerability exploitation (24%)… Continue reading Credentials and Misconfigurations Behind Most Cloud Breaches, Says AWS
New reports show China-based hackers are targeting US federal, state, and global government networks via unpatched Cisco firewalls. Get the full details and necessary steps to secure devices. Continue reading China-Linked Hackers Target Cisco Firewalls in Global Campaign
Your Windows 11 PC will finally shut down! Learn about the KB5067036 update that fixes the decades-old restart glitch, plus new features like faster search and simpler update names. Continue reading Microsoft Fixes Long-Standing ‘Update and Shut Down’ Bug in Windows 11
Kaspersky researchers uncovered Operation ForumTroll, an attack campaign utilising the new ‘Dante’ spyware developed by Memento Labs, the rebranded Hacking Team. The attacks used a Chrome zero-day vulnerability (CVE-2025-2783) and COM hijacking for per… Continue reading New Dante Spyware Linked to Rebranded Hacking Team, Now Memento Labs
Check Point Research exposed a sophisticated, role-based operation called the YouTube Ghost Network, distributing dangerous Lumma and Rhadamanthys Infostealer malware. Learn how cybercriminals use hijacked channels and bots to triple malicious video ou… Continue reading YouTube ‘Ghost Network’ Spreads Infostealer via 3,000 Fake Videos
New intelligence on Hezi Rash: See how the Kurdish group launched 350+ DDoS attacks and used DaaS platforms like EliteStress to lower entry barriers. Continue reading New Kurdish Hacktivists Hezi Rash Behind 350 DDoS Attacks in 2 Months
Russia arrests developers of the notorious Meduza Stealer MaaS operation. Learn how the group’s ‘fatal error’ led to the crackdown on domestic cybercrime. Continue reading Russia Arrests Meduza Stealer Developers After Government Hack