Malware

Twitter

Facebook

Copy Link

Top News

Critical AI/ML Vulnerabilities Discovered in Python Libraries From Nvidia, Salesforce, and Apple

Security researchers uncovered vulnerabilities in popular Python libraries used across AI and ML models with millions of downloads. The flaws allow attackers to hide malicious code in model metadata that executes automatically when loaded. Nvidia NeMo, Salesforce Uni2TS, and Apple FlexTok were all affected, with patches now released following responsible disclosure.

Technology2 sources

Critical AI/ML Vulnerabilities Discovered in Python Libraries From Nvidia, Salesforce, and Apple

Technology2 sources

ChatGPT vulnerability exposed as ZombieAgent attack bypasses OpenAI security guardrails

Security researchers at Radware discovered ZombieAgent, a new prompt injection attack that bypasses ChatGPT's security measures to exfiltrate sensitive user data. The exploit revives the previously patched ShadowLeak vulnerability, highlighting a persistent structural weakness in AI chatbots where guardrails fail to address the root cause of indirect prompt injection attacks.

Technology2 sources

ChatGPT vulnerability exposed as ZombieAgent attack bypasses OpenAI security guardrails

Technology2 sources

Two Chrome Extensions Caught Stealing AI Chats from 900,000 ChatGPT and DeepSeek Users

Cybersecurity researchers uncovered two malicious Chrome extensions that exfiltrated ChatGPT and DeepSeek conversations from over 900,000 users. The extensions disguised themselves as legitimate AI tools while secretly harvesting AI chatbot conversations and browsing data every 30 minutes. This attack method, dubbed Prompt Poaching, raises concerns about user privacy and corporate espionage as even featured extensions on official stores prove vulnerable.

Technology3 sources

Two Chrome Extensions Caught Stealing AI Chats from 900,000 ChatGPT and DeepSeek Users

Technology3 sources

AI Agents Emerge as Top Cybersecurity Threats in 2026, Security Experts Warn

Security leaders at Palo Alto Networks and Zscaler sound the alarm on AI agents becoming the biggest insider threat in 2026. As 40% of enterprise applications integrate with task-specific AI agents by year-end, organizations face autonomous threats that can execute attacks at machine speed, manipulate identities, and exfiltrate data without human oversight.

Technology6 sources

AI Agents Emerge as Top Cybersecurity Threats in 2026, Security Experts Warn

Technology6 sources

Browser extensions with 8 million users caught secretly harvesting AI conversations

Popular browser extensions marketed as VPNs and ad blockers are intercepting and selling complete AI chatbot conversations from millions of users. Cybersecurity firm Koi discovered eight extensions, including Urban VPN Proxy with 6 million installs, that capture every prompt and response from platforms like ChatGPT, Claude, and Gemini. The data is transmitted to third-party marketing firms, with no way to disable collection except complete uninstallation.

Technology11 sources

Browser extensions with 8 million users caught secretly harvesting AI conversations

Technology11 sources

Attackers exploit ChatGPT and Google ads to spread AMOS infostealer targeting macOS users

Cybersecurity researchers at Huntress and Kaspersky uncovered a sophisticated campaign using Google ads to promote malicious ChatGPT and Grok conversations. The attack tricks macOS users searching for troubleshooting advice into executing terminal commands that install AMOS infostealer malware. This social engineering tactic exploits user trust in established platforms to bypass traditional security measures.

Technology7 sources

Attackers exploit ChatGPT and Google ads to spread AMOS infostealer targeting macOS users

Technology7 sources

Google Warns of Sophisticated AI-Powered Scams Targeting Job Seekers and Businesses

Google issues advisory about rising AI-driven scams that create convincing fake job listings, clone business pages, and impersonate legitimate platforms. The company warns of increased risks during holiday shopping season and implements new protection measures.

Technology2 sources

Google Warns of Sophisticated AI-Powered Scams Targeting Job Seekers and Businesses

Technology2 sources

Google Discovers AI-Powered Malware in the Wild, But Experts Question Real-World Threat Level

Google's Threat Intelligence Group has identified several new malware families that leverage AI and large language models for dynamic code generation and evasion tactics. However, security experts argue these AI-generated threats remain experimental and pose limited real-world danger compared to traditional malware development methods.

Technology17 sources

Google Discovers AI-Powered Malware in the Wild, But Experts Question Real-World Threat Level

Technology17 sources

Microsoft Uncovers SesameOp Backdoor Exploiting OpenAI's API for Covert Espionage Operations

Microsoft's cybersecurity team discovered a sophisticated backdoor called SesameOp that abuses OpenAI's Assistants API as a command-and-control channel. The malware hides malicious activities by blending with legitimate AI traffic, enabling long-term espionage operations while evading traditional detection methods.

Technology3 sources

Microsoft Uncovers SesameOp Backdoor Exploiting OpenAI's API for Covert Espionage Operations

Technology3 sources

Google Expands Live Threat Detection: Enhanced App Security Coming to More Android Devices

Google is set to broaden the reach of its Live Threat Detection feature, bringing real-time app security monitoring to a wider range of Android devices. This AI-powered tool aims to make identifying and addressing potentially harmful apps more accessible and user-friendly.

Technology3 sources

Google Expands Live Threat Detection: Enhanced App Security Coming to More Android Devices

Technology3 sources

AI-Powered Cyberattacks on the Rise: Russia, China, and Others Escalate Digital Threats

Microsoft's latest report reveals a sharp increase in AI-driven cyberattacks by foreign adversaries against the US. The tech giant warns of evolving tactics and the urgent need for improved cybersecurity measures.

Technology5 sources

AI-Powered Cyberattacks on the Rise: Russia, China, and Others Escalate Digital Threats

Technology5 sources

Taiwan Reports Surge in Chinese Cyberattacks and Warns of 'Online Troll Army'

Taiwan's National Security Bureau reports a 17% increase in Chinese cyberattacks on government departments in 2025, averaging 2.8 million daily attacks. The bureau warns of an 'online troll army' spreading disinformation and sowing discord among Taiwanese citizens.

Technology2 sources

Taiwan Reports Surge in Chinese Cyberattacks and Warns of 'Online Troll Army'

Technology2 sources

OpenAI Disrupts Malicious AI Use by State-Sponsored and Cybercriminal Groups

OpenAI's latest threat report reveals how state-sponsored actors and cybercriminals are misusing AI tools for surveillance, malware development, and influence campaigns. The company has banned over 40 malicious networks since February 2024.

Technology11 sources

OpenAI Disrupts Malicious AI Use by State-Sponsored and Cybercriminal Groups

Technology11 sources

Prev 1…4 5 67Next