Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
https://ift.tt/zRTgcuC tested 444 AI chatbot apps for iPhone and found that 282 of them, nearly
New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
https://ift.tt/OU4rhxv an AI browser that it is playing a game, and it can hand over
Apple Patches 30+ iOS, macOS, Safari Flaws, Including AI-Discovered WebKit Bugs
https://ift.tt/0XvE7yo on Monday released security updates for iOS, macOS, and the Safari web browser to
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
https://ift.tt/2k57dPJ has found a malicious Chrome extension that posed as the AI search engine Perplexity
Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks
The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets,
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and More
https://ift.tt/hcJL1I6 week was a reminder that attackers do not always need big tricks. One small
Gamaredon Expands Ukraine Attacks with New Malware and Cloud Service Abuse
A Russian advanced persistent threat (APT) group has continued to evolve and expand its malware
What the post-quantum executive order really demands of CISOs
Post-quantum cryptography didn’t sneak up on the industry. For years, security teams, standards bodies, hyperscalers,
ATF cancels controversial commercial geolocation contract
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) canceled a contract with Penlink that
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
https://ift.tt/NvzUHFS high-severity flaw in Amazon Q Developer let a malicious repository run commands and steal