AI Recommendation Poisoning: How ‘Ask AI’ Buttons Silently Alter LLM Memory
A new class of prompt injection attack, dubbed "AI Recommendation Poisoning," is spreading across commercial websites. It exploits pre-filled deep links in…
Category: Cyber News
Latest cybersecurity news, breaches, vulnerability disclosures and industry developments.
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Attackers breached an organization's Oracle database via a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit named…
Ransom Cartel Creator Sentenced to 16 Years in Prison for Ransomware-as-a-Service Operation
A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau, a 40-year-old Belarusian national, to 16 years in prison on August 5, 2026,…
Snowflake Hacker Pleads Guilty Over Breaches Affecting at Least 100 Million People
Connor Riley Moucka, a 26-year-old Canadian national, pleaded guilty in Seattle federal court to computer fraud, wire fraud, aggravated identity theft, and…
OpenAI Disrupts Cambodia-Based Scam Network Abusing ChatGPT for Fraud
OpenAI has disrupted a Cambodia-based scam operation that leveraged its ChatGPT AI chatbot to facilitate a wide range of fraudulent schemes, including…
Poison Claude Service Exposes Risks of Discounted AI Access, Okta Warns
Cybersecurity researchers at Okta have uncovered a network of underground services selling discounted access to Anthropic's large language models (LLMs), including Opus…
Kali365 Phishing Kit Exploits Microsoft Device Code Flow to Target US Enterprises
Kali365, a device code phishing kit, is actively targeting US organizations by abusing Microsoft's legitimate authentication flow. According to ANY.RUN telemetry, the…
Leaked n8n API Tokens Expose 321 Live Instances to Credential Theft
GitGuardian researchers have uncovered a significant security risk affecting n8n, a popular open-source workflow automation platform. By scanning public GitHub commits, they…
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 malicious extensions on the Open VSX marketplace has been discovered impersonating legitimate developer tools while exfiltrating sensitive information…