Frostbyte10 Bugs Put Thousands of Refrigerators At Major Grocery Chains At Risk Summary Security researchers at Armis disclosed ten vulnerabilities — collectively dubbed “Frostbyte10” — in Copeland E2 and E3…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline, dubbed Auto Exploit by its creators, used prompts to a large language model, CVE advisories and open-source…
Cloudflare, Zscaler among companies impacted by Salesloft Drift incident Summary A widespread data-theft campaign tied to the Salesloft-acquired AI chatbot Drift has exposed customer data from hundreds of organisations that…
FTC fines toy manufacturer for allowing Chinese third-party to collect kids’ data Summary The US Department of Justice, following a referral from the Federal Trade Commission (FTC), filed a complaint…
What is information security (infosec)? Summary Information security (infosec) is the set of policies, procedures and controls used to protect information—digital or physical—against unauthorised access, modification, disruption and destruction. The…
Hackers Threaten To Submit Artists’ Data To AI Models If Art Site Doesn’t Pay Up Summary An extortion stunt with a modern twist: the ransomware group LunaLock claims to have…
Frostbyte10 Bugs Put Thousands of Refrigerators At Major Grocery Chains At Risk Summary Security firm Armis has disclosed ten vulnerabilities dubbed “Frostbyte10” in Copeland E2 and E3 controllers, devices widely…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-powered offensive research pipeline developed by two independent Israeli security researchers — dubbed Auto Exploit — uses prompts to a large…
Summary Security researchers warn that browser-based AI agents from major vendors are automating workflows without adequate security awareness or guardrails, creating new attack surfaces for organisations. Guardio Labs found agents…
Amazon Stymies APT29 Credential Theft Campaign Summary Amazon’s security team identified and disrupted a watering-hole credential-theft campaign run by APT29 (also tracked as Midnight Blizzard, Nobelium, Cozy Bear). The adversary…
