NVIDIA NemoClaw Flaw Lets Malicious Webpages Poison Local AI Models via Ollama
Oasis Security has disclosed a vulnerability in NVIDIA's NemoClaw, an open-source reference stack for running AI agents, that could allow an attacker-controlled…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
WhatsApp Rolls Out Multiple Passkeys and Stronger Two-Step Verification to Thwart Phishing
Meta has announced new WhatsApp account security features, including support for multiple passkeys per account on both iOS and Android, enhancing phishing-resistant…
24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages
Cybersecurity researchers at OX Security have uncovered a campaign that abuses 24 npm packages as free phishing infrastructure. The packages host HTML…
Mirage2FA Phishing Campaign Hits 4,500+ Companies, Bypassing Microsoft 365 MFA
A large-scale phishing campaign dubbed Mirage2FA has impacted over 4,500 organizations in the US and EU, abusing Microsoft 365 login flows to…
Shadow AI Power Users: The 5% Creating Outsized Enterprise Security Risk
New research from Akamai reveals that a small fraction of enterprise employees—the top 5% of AI power users—are creating a disproportionate security…
Operation QUICSILVER: New Go Backdoor Targets Myanmar Government and IT Sectors
Cybersecurity researchers have uncovered a cyber espionage campaign targeting Myanmar government and IT sectors, dubbed Operation QUICSILVER. The campaign, first observed in…
TikTok to Pay $400 Million to Settle U.S. Child Privacy Lawsuit
The U.S. Department of Justice (DoJ) announced on Friday that ByteDance-owned TikTok will pay $400 million to settle a 2024 lawsuit accusing…
Microsoft Defender’s Boot-Time Driver Can Be Abused to Delete Security Software
Check Point Research has disclosed a technique that abuses Microsoft Defender's own legitimately signed boot-time remediation driver, BTR.sys, to perform arbitrary kernel-level…
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The U.S. government has issued a joint advisory warning of an active threat targeting critical infrastructure organizations using AI-generated exploit scripts. The…
New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
Adversa AI has disclosed a novel attack technique dubbed "Cryptographic Context Injection" that can cause xAI's Grok chatbot to exfiltrate a user's…