GuardFall Bypass Exploits Shell Injection in Open-Source AI Coding Agents
New research from Adversa AI, dubbed 'GuardFall,' reveals that ten out of eleven popular open-source AI coding agents are vulnerable to a…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
282 iOS AI Apps Leak API Keys and OpenAI Proxy Access in Network Traffic Study
Researchers at Wake Forest University tested 444 AI chatbot apps for iPhone and found that 282 of them (nearly two-thirds) exposed paid…
BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
A new attack technique called BioShocking, discovered by security firm LayerX, exploits AI browsers and assistants by tricking them into leaking user…
WhatsApp Introduces Usernames to Enhance User Privacy and Protect Phone Numbers
WhatsApp has officially announced the global rollout of username reservations, a new privacy feature designed to protect the phone numbers of its…
Weekly Cybersecurity Recap: Linux Kernel Flaws, AI Malware, Turla Backdoor, and Infostealers
This week's cybersecurity landscape highlighted significant threats including a new Linux kernel flaw, AI-assisted malware, and active exploitation of critical vulnerabilities. The…
Why Post-Quantum Cryptography Starts With Credentials: A Credentials-First Migration Strategy
Today's encrypted data, such as credentials, may no longer remain confidential in the future because the public-key cryptography protecting it will soon…
236,000 DCloud Uni-App Sites Fuel Global Crypto Scams and Phishing Operations
Infoblox has uncovered a massive network of over 236,000 websites built using the legitimate Chinese open-source framework DCloud Uni-App, which are being…
OpenAI Previews GPT-5.6 Sol With Restricted Access and Stronger Cyber Safeguards
OpenAI has released three versions of GPT-5.6—Sol, Terra, and Luna—as a limited preview to a small number of companies in coordination with…
Guardian Agents: Governing AI Identity in Enterprise Environments
AI agents are increasingly deployed in enterprise environments, inheriting permissions and executing tasks autonomously, often bypassing traditional identity governance controls. This article…
Russia Used Cellebrite on Jailed Activist’s iPhone Months After Sales Cutoff
Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three…