Collaborate Disseminate
Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.
The post Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts appeared first on SecurityWeek.
Continue reading Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.
The post Meta AI Hacked External Systems During Cybersecurity Testing appeared first on SecurityWeek.
Continue reading Meta AI Hacked External Systems During Cybersecurity Testing
The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.
The post How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones appeared first on SecurityWeek.
Continue reading How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones
Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
The post New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts appeared first on SecurityWeek.
Continue reading New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts
The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.
The post Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data appeared first on SecurityWeek.
Continue reading Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data
Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption.
The post Water Sector Cyberattacks Reportedly Hit at Least 12 States appeared first on SecurityWeek.
Continue reading Water Sector Cyberattacks Reportedly Hit at Least 12 States
Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.
The post TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover appeared first on SecurityWeek.
Continue reading TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover
The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.
The post Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers appeared first on SecurityWeek.
Continue reading Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers
The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.
The post N‑able Patches Vulnerability Exploited to Hack N-central Servers appeared first on SecurityWeek.
Continue reading N‑able Patches Vulnerability Exploited to Hack N-central Servers
Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hackers.
The post US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States appeared first on SecurityWeek.
Continue reading US Water Cyberattacks Extend Beyond Minnesota to at Least 6 Other States