737 Chrome VPN Extensions Caught Routing Traffic Through Proxies: What You Need to Know
A massive operation involving 737 free VPN and proxy extensions on the Chrome Web Store has been uncovered, primarily targeting Russian-speaking users…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
Enterprise Defenses Recover at the Edge but Collapse Inside: Picus Blue Report 2026
The Picus Blue Report 2026, based on over 338 million attack simulations in production environments, reveals a split in enterprise defense effectiveness.…
OpenAI, Anthropic, Google API Flaw Lets Weaker AI Models Decode Stronger Models’ Reasoning
A newly disclosed flaw in the way OpenAI, Anthropic, and Google handle hidden AI reasoning between API calls allowed researchers to recover…
Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations
Two malicious LiteLLM releases on PyPI, versions 1.82.7 and 1.82.8, were live for about 40 minutes on March 24, 2026, carrying credential-stealing…
OpenAI Unveils GPT-5.6-Cyber: Reduced Safeguards for Exploit Development and Vulnerability Research
OpenAI has launched GPT-5.6-Cyber, a specialized cybersecurity model designed for vulnerability research, penetration testing, and incident response. Built on the GPT-5.6 Sol…
Researchers Pose as Fake Crypto Startup to Hire Suspected North Korean IT Workers
Security researchers created a fictitious cryptocurrency startup and hired three individuals they believe were North Korean IT operatives, as part of an…
Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Accidental Exposure in Private Repo
Mozilla has revoked the cryptographic signing key used for Firefox and Thunderbird downloads on Linux after an unencrypted copy of the key…
Malicious SIM Cards Can Execute Code on Cellular IoT Modems, Researchers Find
Researchers at the University of Birmingham and the security firm Fuzzware have discovered that a malicious SIM card can execute attacker-controlled code…
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
Researchers at ASSET Research Group have disclosed a new attack technique, dubbed GhostSplice, that exploits the Model Context Protocol (MCP) to trick…
Windows 11 USB Auto-Install Flaw Enables SYSTEM Takeover via PnP Abuse
Security researchers have demonstrated a new attack technique that abuses Windows Plug and Play (PnP) auto-install to achieve full SYSTEM privileges on…