Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks
The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign involving a malicious program disguised as a Notepad++…
Tag: Web Security
Hackers Exploit Unpatched Windmill Path Traversal Flaw CVE-2026-29059 to Read Server Files
A high-severity path traversal vulnerability in the open-source developer platform Windmill, tracked as CVE-2026-29059 (CVSS 7.5), is under active exploitation. The flaw…
Critical NGINX Heap Buffer Overflow CVE-2026-42533 Allows DoS and Potential RCE
F5 has patched a critical heap buffer overflow vulnerability in NGINX, tracked as CVE-2026-42533, which can crash worker processes and may allow…
Closing the Approval Gap in AI-Era Ad Tech: A Webinar Summary
A single approved marketing tag can quietly load fourth-party code your security team has never seen, granting full access to your forms,…
Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants
Cybersecurity researchers at Sand Security have disclosed a now-patched critical session isolation vulnerability in Writer, an enterprise generative AI platform. The flaw,…
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The…
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Microsoft has discovered a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for.…
Reflectiz Monitors AI Recommendation Poisoning
Reflectiz offers continuous monitoring for 'Ask AI' links carrying memory instructions, providing a free cheat sheet for auditing web exposure and cleaning…
AutoJack Attack: One Malicious Web Page Can Hijack AI Agents for Remote Code Execution
Microsoft researchers have disclosed a novel exploit chain named AutoJack that allows a single malicious web page to hijack an AI browsing…