108 casos · pág. 1/6
Cisco and Splunk ran a live Agentic SOC at Splunk .conf26, combining Cisco Cloud Control, Splunk Enterprise Security (ES), Cisco Talos intelligence and Endace continuous packet capture, with Jamf engineers also on the team. The article is largely a product and event retrospective. Its one security incident was a fake-Corepack npm credenti…
Researchers at Hacktron disclosed a vulnerability chain in OpenAI's ChatGPT Atlas Chromium-based AI browser that lets an attacker monitor all open tabs and capture OAuth authorization codes for any site, effectively breaking the same-origin policy. Atlas exposes Mojo IPC bindings to all .chatgpt.com and .openai.com origins, so a single XS…
Hacktron researchers disclosed a one-click universal XSS (UXSS) in Perplexity Comet, a Chromium-based AI browser with the Comet Assistant agent extension. The extension's manifest trusts the wildcard https://.perplexity.ai/ in externallyconnectable, so a single XSS on any perplexity.ai subdomain can reach privileged extension message hand…
Researcher Mohan Pedhapati of Hacktron ran an AI-driven audit against vinext, Cloudflare's Next.js reimplementation reportedly built in a week with AI assistance. The scan produced 45 findings, of which 24 were manually validated, including several Critical issues. The most serious bugs allow cross-user session data leakage, shared cache …
Researchers at Hacktron disclosed a vulnerability chain in Cluely, an Electron-based AI assistant that reads the user's screen and microphone. They found it in July 2025 and published in February 2026. The main window had no will-navigate handler, so a link in the AI's markdown response could navigate the whole app to an attacker-controll…
Researcher ahacker1, using the Hacktron AI tooling, disclosed a bypass of earlier fixes for prompt-injection-to-RCE in VS Code Copilot Chat agent mode. A TOCTOU flaw in the applyPatchTool component lets a crafted prompt write files outside the workspace without user confirmation. The attack can be triggered by pasting a prompt into Copilo…
F5 Labs published its November 2025 AI Security Insights, drawn from the Comprehensive AI Security Index (CASI) and Agentic Resistance Scoring (ARS). Anthropic models took the whole top tier of the CASI leaderboard (Claude Haiku 4.5 at 95.89, Claude Sonnet 4.5 at 95.86, Claude Sonnet 4 at 95.33), while the GPT-5 family slipped, with GPT-5…
A flaw dubbed SneakPeek in the preview pane of Anthropic's Claude Code Desktop can let adversaries quietly steal credentials from developers without any user interaction (zero-click). According to the report, exposed secrets include SSH private keys, AWS credentials and Claude OAuth tokens. The article excerpt provides no CVE identifier, …
Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …
Check Point researchers disclosed two high-risk vulnerabilities in LiteLLM, an open-source LLM gateway with almost 100,000 downloads a month. The gateway connects enterprise AI applications to providers such as OpenAI, Google and Anthropic. The flaws, CVE-2026-35029 and CVE-2026-59823, could let any user with an account on a vulnerable de…
The paid WordPress SEO plugin Rank Math PRO was hit by a supply chain attack. Copies of version 3.0.123 downloaded from the vendor's site or delivered as updates between October 15, 2026 20:02 UTC and October 16, 2026 07:12 UTC contained malware (securityweek.com, thehackernews.com, bleepingcomputer.com). Any site that installed and activ…
An intruder reached a legacy system at OpenCode on the night of October 16, and the company says third-party AI provider keys saved in OpenCode Console "may have been exposed." About 1.4% of Console users, all with an outside provider linked, were notified by email on October 17 and told to revoke and replace their OpenAI, Anthropic or Go…
F5 Labs' October AI security roundup describes four incidents, two of which involved no attacker. Coding agents published more than 13,000 internal screenshots to public GitHub repositories (PixelLeak), and a SpaceXAI Grok Bot agent reportedly posted its owner's bank balances to a company Slack channel. The other two involved adversaries …
Researchers at Claroc disclosed GhostShares, a design flaw in Meta's Muse AI assistant that lets anyone discover shared conversations through passive DNS. Muse share links use the domain cf.metaaiusercontent.com and embed the conversation title and a random identifier in the hostname. Once a browser resolves the name, passive DNS sensors …
Attackers took over more than 300 Tor exit relays in early October 2026 and changed their exit policies so SSH (TCP port 22) traffic was redirected to 12 attacker-controlled interception servers that harvested passwords and attempted to install the Ebury 1.8.3 backdoor. Researcher kaba found 333 redirecting exits (roughly 10% of about 3,0…
Automotive AI startup IQ.Lvbs claims that between October 7 and 14, 2026 it faced repeated attempts to steal its NovaSpark driving model, access users' devices and private driving files, and exploit its sign-in system. The company says the first requests came from an IP address assigned to Comma.ai Inc., a rival whose camera hardware Nova…
A former OpenAI engineer with reported Saudi ties was detained after allegedly planting a secret recording device in a conference room at OpenAI's headquarters. Dark Reading presents the case as an example of a preventable insider threat vector. The available text is only a short teaser, so it gives no detail on the device, how long it wa…
Huntress researchers identified a fake page impersonating the WatchGuard download portal that harvested VPN server addresses, usernames and passwords before offering the legitimate Mobile VPN with SSL installer. The investigation began after suspicious activity involving an administrator at a managed service provider (MSP), who found the …
A US federal magistrate judge in San Francisco ordered former OpenAI engineer Abdulrahman Alfozan to remain in custody, citing flight risk. Prosecutors allege he planted a covert audio recording device, hidden in toilet paper behind a TV, in an executive conference room used for confidential meetings. OpenAI found the device in late Septe…
Huntress analyzed an active credential-phishing campaign in which the lookalike domain watchguard-vpn.net harvests WatchGuard SSL VPN credentials. On October 7, 2026, an administrator at a managed service provider searched Bing for "watchguard vpn sll download" and clicked through to the fake page, which Huntress classifies as SEO poisoni…
