AI securityThe Hacker NewsA Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private ChatsA malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the…Read on The Hacker NewsDDoSThe Hacker NewsCloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%Threat actors are launching about 8,226 network-layer distributed denial-of-service (DDoS) attacks per hour, Cloudflare revealed Thursday. The web infrastructure and security company said it autonomously mitigated 18.2 million…Read on The Hacker NewsMalwareDark ReadingDevs Hit by Trojanized Claude Code Extension for CursorTwo serious security issues hit Cursor on the same day, highlighting the risks for AI-powered integrated development environments (IDEs).Read on Dark ReadingPhishingDark ReadingBehind the Scenes of How Operation Blackout Went DownA recent law enforcement operation to dismantle harmful scam centers was a big success. A threat intelligence expert walks us through what happened and why he wants more…Read on Dark ReadingNation-stateThe Hacker NewsChinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations WorldwideChinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks aimed at high-value targets simultaneously. The activity has…Read on The Hacker NewsVulnerabilityDark ReadingL’Italia è afflitta da vulnerabilità informatiche, senza una causa chiaraI ricercatori non riescono a spiegare del tutto perché le minacce informatiche in Italia siano così diverse rispetto a quelle di qualsiasi altro Paese.Read on Dark ReadingVulnerabilityThe Hacker NewsTeamViewer Flaw Lets Remote Computers Attack Users Who Connect to Control ThemTeamViewer has fixed a flaw that lets the machine being controlled in a remote session attack the computer that connected to control it. In a TeamViewer session, the…Read on The Hacker NewsSecurity newsSecurityWeekPHP2Shell Attacks Root Palo Alto Firewalls but Fail Against WordPressOver 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week. The post PHP2Shell Attacks Root Palo Alto…Read on SecurityWeekData breachSecurityWeekIn Other News: Anthropic Breach Dispute, UEFI Flaw Hits Most Servers, Cloudflare AI Data LeakNoteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware. The post In Other News: Anthropic Breach Dispute,…Read on SecurityWeekSecurity newsDark ReadingUndead Software Projects Continue to Raise Security RisksA security firm patched a decade-old app to prevent the takeover of millions of machines, highlighting that abandoned domains remain a boon to attackers.Read on Dark ReadingVulnerabilityThe Hacker NewsWordPress RCE Flaw Draws Nearly 63,000 Attack Attempts in Just 24 HoursThreat actors have been observed attempting to exploit a high-severity security flaw in WordPress Core shortly after patches were released. The vulnerability, which does not have a CVE…Read on The Hacker NewsSecurity newsSecurityWeekPasskeys Are Better Than Passwords. But They Are Not Enough.As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it. The post Passkeys Are Better Than Passwords. But…Read on SecurityWeek
Headlines link to the original publishers. Collected automatically and labelled by topic; INFO SHIELD is not responsible for third-party content.