Cybersecurity

Twitter

Facebook

Copy Link

Key Facts

Key PlayersCrowdStrike, Palo Alto Networks, Darktrace

AI AdoptionAdvanced

Use CasesThreat Detection, Incident Response, Vulnerability Scanning

Top News

OpenClaw's viral rise exposes users to prompt injection attacks and credential theft

OpenClaw, the open-source AI assistant that exploded to 150,000 GitHub stars in months, has become a security nightmare. Researchers discovered 341 malicious skills on ClawHub stealing credentials, while exposed instances leak API keys and OAuth tokens. The platform's 770,000 AI agents on Moltbook face prompt injection attacks that could herald a new era of AI worms.

Technology25 sources

OpenClaw's viral rise exposes users to prompt injection attacks and credential theft

Technology25 sources

Moltbot: How Peter Steinberger's AI Assistant Went Viral and Sparked a Digital Identity Crisis

Peter Steinberger's open-source AI assistant, formerly known as Clawdbot, has been renamed Moltbot after a trademark dispute with Anthropic. The viral personal AI assistant has attracted over 100,000 GitHub stars in just two months, promising to automate computer tasks through everyday chat apps. But the rapid growth has exposed security vulnerabilities and attracted crypto scammers.

Technology34 sources

Moltbot: How Peter Steinberger's AI Assistant Went Viral and Sparked a Digital Identity Crisis

Technology34 sources

Malicious VS Code Extensions With 1.5 Million Installs Steal Developer Source Code

Cybersecurity researchers uncovered two malicious VS Code extensions disguised as AI-powered coding assistants that secretly exfiltrated developer source code to China-based servers. ChatGPT - 中文版 and ChatMoss, with 1.5 million combined installs, remain available on the Visual Studio Marketplace despite actively stealing files and tracking user behavior through hidden mechanisms.

Technology2 sources

Malicious VS Code Extensions With 1.5 Million Installs Steal Developer Source Code

Technology2 sources

Galaxy S26 could gain Google's Scam Detection, ending years of Pixel exclusivity

Google's Scam Detection feature, previously exclusive to Pixel phones, appears headed to Samsung's Galaxy S26 series. Code found in the Google Phone app references Galaxy S26 model numbers alongside Pixel devices and the internal codename for Scam Detection. The move could mark a significant shift in how Samsung approaches phone security, though questions remain about implementation.

Technology6 sources

Galaxy S26 could gain Google's Scam Detection, ending years of Pixel exclusivity

Technology6 sources

cURL scraps bug bounties as AI slop overwhelms security team with fake vulnerability reports

The widely-used networking tool cURL is ending its HackerOne bug bounty program after being flooded with AI-generated fake vulnerability reports. Lead developer Daniel Stenberg cited the need to protect maintainers' mental health as low-quality submissions strained the small security team. The move raises questions about the future of open-source security programs.

Technology2 sources

cURL scraps bug bounties as AI slop overwhelms security team with fake vulnerability reports

Technology2 sources

Professor loses two years of academic work after ChatGPT deletes all chats without warning

Marcel Bucher, a plant sciences professor at the University of Cologne, lost two years of carefully structured academic work when ChatGPT permanently deleted all his chats after he disabled the data consent option. OpenAI stated the deletion was part of their 'privacy by design' policy, with no recovery option available. The incident raises questions about AI tools reliability for professional use.

Entertainment3 sources

Professor loses two years of academic work after ChatGPT deletes all chats without warning

Entertainment3 sources

TikTok deal finalizes as ByteDance divests US operations to American investors

After years of legal battles and national security concerns, TikTok has closed a deal splitting its US operations from its global business. Oracle, Silver Lake, and MGX now control 45% of TikTok US through a new joint venture, while ByteDance retains a minority stake. The agreement raises questions about user data privacy and algorithm changes that could affect 200 million American users.

Business3 sources

TikTok deal finalizes as ByteDance divests US operations to American investors

Business3 sources

Free Script Strips AI Features From Chrome, Edge, and Firefox in Minutes

Tech developer Corbin Davenport released Just The Browser, a free open-source script that removes AI features, telemetry data, and sponsored content from major web browsers. The tool uses group policy settings to disable unwanted integrations in Google Chrome, Microsoft Edge, and Mozilla Firefox, offering users a streamlined browsing experience without manual configuration.

Technology3 sources

Free Script Strips AI Features From Chrome, Edge, and Firefox in Minutes

Technology3 sources

New Android malware uses AI to commit ad fraud, bypassing traditional security defenses

Security researchers have uncovered a sophisticated Android malware strain that uses Google's TensorFlow machine learning library to automate ad clicks in hidden browsers. The malware affects over 155,000 downloads across games distributed through Xiaomi's GetApps store and third-party platforms, operating covertly while draining batteries and inflating mobile data charges.

Technology4 sources

New Android malware uses AI to commit ad fraud, bypassing traditional security defenses

Technology4 sources

Datarails raises $70M to bring AI Finance Agents to CFOs struggling with fragmented data

Israeli fintech Datarails announced $70 million in Series C funding led by One Peak, bringing total capital raised to over $175 million. The company launched AI Finance Agents that automate financial reporting, allowing CFOs to generate board-ready presentations instantly. The platform addresses data fragmentation across finance departments while maintaining Excel familiarity.

Technology2 sources

Datarails raises $70M to bring AI Finance Agents to CFOs struggling with fragmented data

Technology2 sources

Chainlit AI framework vulnerabilities expose enterprise clouds to data theft and takeover

Two critical security flaws in Chainlit, an open-source AI framework downloaded 700,000 times monthly, allow attackers to read arbitrary files and launch server-side request forgery attacks. The vulnerabilities, dubbed ChainLeak, put enterprise cloud environments at risk of data theft and full system compromise across financial services, energy, and academic sectors.

Technology3 sources

Chainlit AI framework vulnerabilities expose enterprise clouds to data theft and takeover

Technology3 sources

Palantir CEO Alex Karp says AI will eliminate need for immigration, destroy humanities jobs

Alex Karp made bold claims at Davos that AI will displace enough jobs to make large-scale immigration obsolete, while vocational training becomes essential. The Palantir CEO's controversial statements come as his company's value soars past $400 billion, even as skeptics question whether AI investments are delivering actual returns.

Entertainment8 sources

Palantir CEO Alex Karp says AI will eliminate need for immigration, destroy humanities jobs

Entertainment8 sources

VoidLink malware shows AI can build sophisticated cyber threats in days, not months

Check Point Research uncovered VoidLink, the first documented advanced malware framework predominantly created by artificial intelligence. A single developer used AI agents to build this cloud-targeting Linux malware in less than a week, producing 88,000 lines of code that would typically require multiple teams and months of work. The discovery marks a shift in how sophisticated cyber threats can be developed.

Technology5 sources

VoidLink malware shows AI can build sophisticated cyber threats in days, not months

Technology5 sources

Anthropic patches critical Git MCP server flaws that enabled remote code execution via AI tools

Anthropic fixed three security vulnerabilities in its official Git MCP server that researchers say could be chained with other tools to execute malicious code or overwrite files through prompt injection. The flaws, discovered by Cyata, were patched in December 2025 after responsible disclosure in June, with no evidence of active exploitation in the wild.

Technology3 sources

Anthropic patches critical Git MCP server flaws that enabled remote code execution via AI tools

Technology3 sources

Google Gemini exploited to leak private Calendar data through malicious invites

Security researchers at Miggo Security discovered how to trick Google Gemini into leaking sensitive Calendar information using only a calendar invite and natural language instructions. The attack exploited Gemini's deep integration with Google Workspace, bypassing existing defenses to exfiltrate private meeting data without user awareness. Google has since added new mitigations, but the incident highlights ongoing challenges in securing AI assistants against prompt injection attacks.

Technology6 sources

Google Gemini exploited to leak private Calendar data through malicious invites

Technology6 sources

Prev 1…515253…62 Next