Cybersecurity

Twitter

Facebook

Copy Link

Key Facts

Key PlayersCrowdStrike, Palo Alto Networks, Darktrace

AI AdoptionAdvanced

Use CasesThreat Detection, Incident Response, Vulnerability Scanning

Top News

Anthropic patches critical Git MCP server flaws that enabled remote code execution via AI tools

Anthropic fixed three security vulnerabilities in its official Git MCP server that researchers say could be chained with other tools to execute malicious code or overwrite files through prompt injection. The flaws, discovered by Cyata, were patched in December 2025 after responsible disclosure in June, with no evidence of active exploitation in the wild.

Technology3 sources

Anthropic patches critical Git MCP server flaws that enabled remote code execution via AI tools

Technology3 sources

Google Gemini exploited to leak private Calendar data through malicious invites

Security researchers at Miggo Security discovered how to trick Google Gemini into leaking sensitive Calendar information using only a calendar invite and natural language instructions. The attack exploited Gemini's deep integration with Google Workspace, bypassing existing defenses to exfiltrate private meeting data without user awareness. Google has since added new mitigations, but the incident highlights ongoing challenges in securing AI assistants against prompt injection attacks.

Technology6 sources

Google Gemini exploited to leak private Calendar data through malicious invites

Technology6 sources

Nearly 200 AI Apps on App Store Expose Millions of User Records in Massive Security Breach

Security firm CovertLabs has uncovered a widespread security crisis affecting nearly 200 apps on Apple's App Store, with AI apps dominating the list of offenders. The Firehound project reveals that Chat & Ask AI by Codeway alone has exposed over 406 million records from 18 million users, including chat histories, email addresses, and phone numbers—all accessible to anyone who knows where to look.

Technology5 sources

Nearly 200 AI Apps on App Store Expose Millions of User Records in Massive Security Breach

Technology5 sources

Winslop Tool Lets Users Strip AI Features From Windows 11 Amid Growing Backlash

A new tool called Winslop offers Windows 11 users an easy way to remove AI features like Copilot and Recall from their systems. Developed by the creator behind FlyOOBE, the app uses a simple checkbox system to disable AI capabilities, remove bloat, and adjust privacy settings. The tool's launch reflects mounting user pushback against Microsoft's aggressive AI integration strategy.

Technology2 sources

Winslop Tool Lets Users Strip AI Features From Windows 11 Amid Growing Backlash

Technology2 sources

Microsoft Copilot vulnerability allowed single-click data theft through URL manipulation

Cybersecurity researchers at Varonis Threat Labs uncovered a Reprompt attack that exploited Microsoft Copilot through specially crafted URLs, enabling theft of sensitive user data with just one click. The prompt injection attack bypassed security guardrails by abusing the 'q' URL parameter, allowing malicious actors to exfiltrate personal information even after the chat window closed. Microsoft has patched the flaw affecting Copilot Personal, though enterprise users of Microsoft 365 Copilot were not impacted.

Technology4 sources

Microsoft Copilot vulnerability allowed single-click data theft through URL manipulation

Technology4 sources

Nozomi Networks unveils Vantage IQ, a private AI assistant for OT and IoT security teams

Nozomi Networks has launched Vantage IQ, the world's first private, company-trained AI assistant designed for operational technology and internet of things security teams. The tool addresses the growing crisis of cyberattacks on critical infrastructure while tackling the shortage of skilled cybersecurity professionals by delivering context-aware, actionable intelligence tailored to each organization's unique environment.

Technology2 sources

Nozomi Networks unveils Vantage IQ, a private AI assistant for OT and IoT security teams

Technology2 sources

Depthfirst Raises $40M Series A to Scale AI Security Platform Against Evolving Cyber Threats

AI security startup depthfirst announced $40 million in Series A funding led by Accel Partners to expand its General Security Intelligence platform. Founded in October 2024, the company uses AI agents to detect vulnerabilities eight times more effectively than traditional tools while reducing false positives by 85%. The funding will accelerate hiring and development as both attackers and defenders increasingly rely on AI.

Startups2 sources

Depthfirst Raises $40M Series A to Scale AI Security Platform Against Evolving Cyber Threats

Startups2 sources

Microsoft and European police dismantle RedVDS cybercrime service behind $40 million in fraud

Microsoft has disrupted RedVDS, a $24-per-month cybercrime subscription service that enabled AI-powered fraud at global scale. The coordinated operation with European law enforcement seized critical servers and took the marketplace offline. RedVDS facilitated payment diversion scams using generative AI tools, face-swapping technology, and voice cloning to impersonate trusted parties and redirect funds.

Policy2 sources

Microsoft and European police dismantle RedVDS cybercrime service behind $40 million in fraud

Policy2 sources

Critical AI/ML Vulnerabilities Discovered in Python Libraries From Nvidia, Salesforce, and Apple

Security researchers uncovered vulnerabilities in popular Python libraries used across AI and ML models with millions of downloads. The flaws allow attackers to hide malicious code in model metadata that executes automatically when loaded. Nvidia NeMo, Salesforce Uni2TS, and Apple FlexTok were all affected, with patches now released following responsible disclosure.

Technology2 sources

Critical AI/ML Vulnerabilities Discovered in Python Libraries From Nvidia, Salesforce, and Apple

Technology2 sources

Crypto scams surge to $17 billion in 2025 as AI-powered fraud tactics dominate the landscape

Cryptocurrency fraud reached unprecedented levels in 2025, with scammers stealing an estimated $17 billion through AI-enhanced tactics and impersonation schemes. Chainalysis reports that AI-powered scams extracted 4.5 times more revenue than traditional methods, while impersonation fraud surged by 1400% year-over-year. The average scam payment jumped from $782 to $2,764, highlighting the growing sophistication of crypto criminals.

Business4 sources

Crypto scams surge to $17 billion in 2025 as AI-powered fraud tactics dominate the landscape

Business4 sources

Signal founder Moxie Marlinspike launches Confer, an encrypted AI chatbot alternative to ChatGPT

Moxie Marlinspike, creator of Signal, has launched Confer—an open source AI chatbot that encrypts user conversations so thoroughly that even server administrators can't access them. Unlike ChatGPT or other mainstream AI assistants, Confer uses passkeys, Trusted Execution Environments, and remote attestation to ensure prompts and responses remain private, addressing growing concerns about data collection in AI platforms.

Technology7 sources

Signal founder Moxie Marlinspike launches Confer, an encrypted AI chatbot alternative to ChatGPT

Technology7 sources

WitnessAI raises $58 million to solve the multi-billion AI security problem enterprises face

WitnessAI just raised $58 million to build what it calls a 'confidence layer for enterprise AI' as companies deploy AI-powered chatbots, agents, and copilots across operations. The startup addresses how enterprises can use powerful AI tools without accidentally leaking sensitive data, violating compliance rules, or opening the door to prompt-based injections—risks that could turn AI security into an $800 billion to $1.2 trillion market by 2031.

Technology3 sources

WitnessAI raises $58 million to solve the multi-billion AI security problem enterprises face

Technology3 sources

Businesses double down on AI security as 64% now assess risks before deployment

Organizations are finally prioritizing AI security, with 64% now assessing AI security risks before deploying tools—a dramatic jump from just 37% last year. The World Economic Forum's latest cybersecurity outlook reveals that 94% of business leaders see AI as the most significant driver of cybersecurity change in 2026, while 87% report increased AI vulnerabilities.

Technology2 sources

Businesses double down on AI security as 64% now assess risks before deployment

Technology2 sources

Linus Torvalds experiments with vibe coding on hobby project, but Linux remains untouched

Linux and Git creator Linus Torvalds revealed he used AI-powered vibe coding to build part of his personal AudioNoise project. Using Google Antigravity, he generated a Python visualizer tool instead of manually coding it. The admission has sparked fresh debate in the developer community about AI-assisted code generation, though Torvalds made clear this approach was only for a trivial hobby project, not critical infrastructure.

Technology5 sources

Linus Torvalds experiments with vibe coding on hobby project, but Linux remains untouched

Technology5 sources

Torq Secures $140 Million Funding at $1.2 Billion Valuation for AI-Driven Security Platform

Israeli cybersecurity startup Torq has closed a $140 million Series D funding round, achieving a $1.2 billion valuation and unicorn status. The company's AI-driven security operations platform uses autonomous AI agents to automate security tasks, allowing analysts to focus on complex threats. Led by Merlin Ventures, the funding will accelerate expansion into commercial and federal markets.

Startups5 sources

Torq Secures $140 Million Funding at $1.2 Billion Valuation for AI-Driven Security Platform

Startups5 sources

Prev 1…404142…50 Next