Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE
https://ift.tt/Os6VF0d researchers found a way to enter Microsoft SharePoint servers as any user, including an
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
https://ift.tt/7Z6YNlL malicious tool server connected to an AI coding assistant can quietly walk off with
⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors
https://ift.tt/RS6unb2 lot of security problems still begin with someone doing a completely normal thing. Cloning
Why transparent AI agents matter more than you think
As security operations teams now use large language models (LLMs) and autonomous AI agents into
Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development
https://ift.tt/5wlerfA Korea’s state hackers are no longer content to type prompts into public chatbots. One
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development
https://ift.tt/wBskA1y is helping development teams produce far more code, far faster. But security teams still
New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA
Three separate research efforts last week demonstrated ways to defeat passkey protections without breaking the
OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
https://ift.tt/vOhK7Me has announced that it’s pausing some “internal activities” involving its upcoming artificial intelligence (AI)
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
https://ift.tt/LZ3a9sV instructions can make Atlassian’s Rovo assistant collect Jira or Confluence data that a signed-in
New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens
https://ift.tt/LKWNPg4 research shows content inside an email can escape its message boundary and interfere with