Collaborate Disseminate
Researchers tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly two-thirds, exposed paid AI access through their network traffic.
In many cases, the path in was visible just by watching what the app sent: a plaintext API key, a re… Continue reading 282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
The FIFA World Cup 2026 opened on June 11. By that date, according to Check Point Research, the fraud infrastructure targeting it had already been built, staged, and partially deployed. Threat actor activity was pre-planned, months out, across three se… Continue reading What the Numbers Say About FIFA 2026 Cyber Risk
An unknown threat actor has been observed exploiting a recently disclosed maximum-severity security flaw in SimpleHelp to deliver two previously unreported malware families, TaskWeaver and Djinn Stealer.
The intrusion involves the exploitation of CVE-… Continue reading Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer
Two researchers have found six security flaws in AirDrop and Quick Share, the wireless features that beam files between nearby devices with no cables or shared network.
An attacker within wireless range, with just a laptop and no prior connection, can… Continue reading AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks
Convince an AI browser that it is playing a game, and it can hand over your login details. That is the finding behind BioShocking, a technique from security firm LayerX that tricked six AI browsers and assistants into copying a user’s credentials … Continue reading New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute arbitrary commands as root on the appliance by sending a crafted request to its API.
The flaw, tracked as CVE-2026-8037, carries a CVSS score of … Continue reading Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
Apple on Monday released security updates for iOS, macOS, and the Safari web browser to address over three dozen flaws, including four vulnerabilities in WebKit that were discovered using artificial intelligence (AI) tools like Anthropic Claude and Ope… Continue reading Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs
A critical security flaw impacting Oracle E-Business Suite has come under active exploitation in the wild, according to Defused Cyber.
The vulnerability, tracked as CVE-2026-46817 (CVSS score: 9.8), refers to an improper privilege management and authe… Continue reading Oracle E-Business Suite Flaw CVE-2026-46817 Actively Exploited in the Wild
Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every query and every character typed into the address bar through an attacker-controlled server befor… Continue reading Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
WhatsApp on Monday officially announced the start of global reservations of usernames with an aim to protect the privacy of more than three billion users on the messaging platform.
The optional feature is designed to help users connect with someone on… Continue reading WhatsApp is Finally Getting Usernames to Help Keep Phone Numbers Private