McDonald’s not lovin’ it when hacker exposes nuggets of rotten security Summary A white-hat researcher using the handle “Bobdahacker” discovered multiple critical security flaws across McDonald’s staff, partner and marketing…
Summary A Russian cyber-espionage group tied to the FSB — tracked as Static Tundra (also called Berserk Bear or Dragonfly) — is exploiting a long-standing Cisco vulnerability (CVE-2018-0171) in the…
Commvault releases patches for two nasty bug chains after exploits proven Summary Researchers at watchTowr published working proof-of-concept exploits for two unauthenticated remote-code-execution (RCE) bug chains affecting Commvault on-premise instances.…
‘Limited’ data leak at Aussie telco turns out to be 280K customer details Summary Aussie telco TPG Telecom has confirmed a cyber incident at its subsidiary iiNet that was contained…
FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure Summary The FBI and Cisco Talos warn that Russia’s FSB (Center 16 / Static Tundra /…
Perplexity’s Comet browser naively processed pages with evil instructions Summary Perplexity’s Comet browser used an AI summarisation agent that ingested page text — including hidden content — without validation. Researchers…
Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE Summary Amazon patched security issues in the Amazon Q Developer VS Code extension after researcher…
How Warlock Ransomware Targets Vulnerable SharePoint Servers Summary Trend Micro researchers detail how the Warlock ransomware group exploits unpatched on-premises Microsoft SharePoint servers to gain rapid, high‑impact access to enterprise…
Cybercriminals Abuse Vibe Coding Service to Create Malicious Sites Summary Cybercriminals are leveraging the generative AI “vibe coding” platform Lovable to spin up convincing malicious websites in minutes. Proofpoint researchers…
Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE Summary Amazon has silently patched security issues in the Amazon Q Developer VS Code extension…
