Collaborate Disseminate
A desync attack method leveraging HTTP/1.1 vulnerabilities impacted many websites and earned researchers more than $200,000 in bug bounties.
The post New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites appeared first on S… Continue reading New HTTP Request Smuggling Attacks Impacted CDNs, Major Orgs, Millions of Websites
Zenity has shown how AI assistants such as ChatGPT, Copilot, Cursor, Gemini, and Salesforce Einstein can be abused using specially crafted prompts.
The post Major Enterprise AI Assistants Can Be Abused for Data Theft, Manipulation appeared first on Sec… Continue reading Major Enterprise AI Assistants Can Be Abused for Data Theft, Manipulation
CyberArk has patched several vulnerabilities that could be chained for unauthenticated remote code execution.
The post Enterprise Secrets Exposed by CyberArk Conjur Vulnerabilities appeared first on SecurityWeek.
Continue reading Enterprise Secrets Exposed by CyberArk Conjur Vulnerabilities
A Google Salesforce instance may have been targeted as part of a ShinyHunters campaign that hit several major companies.
The post Google Discloses Data Breach via Salesforce Hack appeared first on SecurityWeek.
Continue reading Google Discloses Data Breach via Salesforce Hack
Trend Micro has rushed to fix two Apex One zero-days that may have been exploited by Chinese threat actors.
The post Trend Micro Patches Apex One Vulnerabilities Exploited in Wild appeared first on SecurityWeek.
Continue reading Trend Micro Patches Apex One Vulnerabilities Exploited in Wild
Microsoft has unveiled Project Ire, a prototype autonomous AI agent that can analyze any software file to determine if it’s malicious.
The post Microsoft’s Project Ire Autonomously Reverse Engineers Software to Find Malware appeared first on Secu… Continue reading Microsoft’s Project Ire Autonomously Reverse Engineers Software to Find Malware
Cisco has disclosed a data breach affecting Cisco.com user accounts, including names, email address, and phone numbers.
The post Cisco Says User Data Stolen in CRM Hack appeared first on SecurityWeek.
Continue reading Cisco Says User Data Stolen in CRM Hack
Nvidia has patched over a dozen vulnerabilities in Triton Inference Server, including another set of vulnerabilities that threaten AI systems.
The post Nvidia Triton Vulnerabilities Pose Big Risk to AI Models appeared first on SecurityWeek.
Continue reading Nvidia Triton Vulnerabilities Pose Big Risk to AI Models
Forty-four cybersecurity merger and acquisition (M&A) deals were announced in July 2025.
The post Cybersecurity M&A Roundup: 44 Deals Announced in July 2025 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 44 Deals Announced in July 2025
Illumina will pay $9.8 million to settle accusations that products provided to the US government were affected by cybersecurity flaws.
The post Gene Sequencing Giant Illumina Settles for $9.8M Over Product Vulnerabilities appeared first on SecurityWeek.
Continue reading Gene Sequencing Giant Illumina Settles for $9.8M Over Product Vulnerabilities