1–10 of 43,325 articles
Bleeping Computer
FBI warns ARTEX AI hacking tool is powering global cyberattacks
The FBI is warning that hackers are using an AI-powered penetration testing framework called ARTEX to automate cyberattacks against organizations worldwide, including a recent ConnectWise supply-chain breach that compromised Microsoft 365 customer environments. [...]
Bleeping Computer
TSMC employee data breach linked to cloud provider
Taiwan Semiconductor Manufacturing Company (TSMC) confirmed that personal employee data has been leaked online after a threat actor put 6.9GB of information allegedly stolen from the company up for auction. [...]
The Hacker News
Italy Fines Meta €805 Million Over Facebook's Android Gallery Access Without Explicit Consent
Meta was fined €805 million in Italy yesterday over a Facebook for Android feature that suggests photos and videos from users' phone galleries for them to post. The Garante, Italy's data protection authority, found that the feature was enabled by default and that the app accessed Italian users' photos, videos, and…
The Hacker News
Stolen Fireworks AI Key Led to Cursor Data Breach and Trojanized Claude Code Extension
The compromise of Anthropic's official Claude Code extension on Cursor's extension marketplace was the result of the theft of an access key that was exposed in the wake of a breach targeting Fireworks AI. "An attacker obtained an access key we had issued to Fireworks," Cursor said in a Friday update. "The key was…
Bleeping Computer
Cursor confirms security breach led to malicious Claude Code extension
Cursor confirmed it suffered a security breach that let hackers distribute a malicious Claude Code extension through its marketplace after stealing credentials from AI infrastructure provider Fireworks AI. [...]
Bleeping Computer
US disrupts North Korean campaign behind $400 million crypto theft
The U.S. government has disrupted a North Korean social engineering campaign called 'FaceStealer', responsible for stealing more than $400 million in cryptocurrency. [...]
The Hacker News
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a high-severity security flaw impacting UnrealIRCd, an open-source Internet Relay Chat (IRC) server, to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability, tracked as…
The Register
Big Tech takes a beating as online safety experts accuse companies of doing bare minimum
Accessing banned content is as easy as whipping out a thesaurus, Parliament's Communications and Digital Committee hears
The Register
This year’s bug count just passed 100K
‘We don’t have a security problem anymore. We have a data problem now’
Dark Reading
ArcticRAT Cybercrime Gang Profiles Victim Finances With AI
The Android malware has expanded from focusing on crypto theft to full device control, and the attackers have added advanced analysis of stolen information.