Hundreds of OpenAI Agents Invaded Hugging Face Servers
The Hugging Face incident was bigger and worse than previously thought, with approximately 700 agents collaborating on a sophisticated, multistage attack.
Últimas Notícias
3768 notíciasPaperCut releases second emergency patch for exploited flaws
PaperCut has released a second emergency security update for two actively exploited vulnerabilities in its PaperCut NG and MF print management software after researchers discovered multiple ways to bypass the initial fixes. [...]
Paubox Is G2’s Highest-Rated Email Encryption and HIPAA Compliant Messaging Software for Fall 2026 – 01net
Paubox Is G2's Highest-Rated Email Encryption and HIPAA Compliant Messaging Software for Fall 2026 01net
Offensive Security Investments Surge as AI Threats Increase
Omdia's Theresa Lanowitz talks with the Dark Reading News Desk about the potential — and risks — of using agentic AI for penetration testing, red teaming, and other practices.
GiveWP WordPress donation plugin flaw lets hackers execute server commands
A maximum-severity vulnerability in the GiveWP plugin for WordPress allows an unauthenticated attacker to execute arbitrary commands on the hosting server. [...]
Attackers Chain Two PaperCut Flaws to Execute Code Without Authentication
Malicious actors are exploiting a newly patched security flaw in PaperCut NG and MF to execute arbitrary code on susceptible instances, as the company released a fresh emergency fix with additional hardening. "This vulnerability gives an unauthenticated attacker remote control o…
Medtronic recalls pH monitoring capsule linked to 184 serious injuries
For the second time in two years, Medtronic has pulled capsules from the market over a fault that could obstruct patients’ airways.
68-year-old imprisoned after making $1.3 million by pirating IPTV services
A 68-year-old has been sentenced in the U.K. to more than six years in prison for operating an illegal IPTV (Internet Protocol Television) service that generated £980,812 ($1.3 million) over three years. [...]
Android 17 Adds OS-Wide ECH to Hide Website Visits From Network Providers
Google on Thursday announced new network security protections in Android 17 to bolster connection privacy, address cellular vulnerabilities, and safeguard the privacy of users' home networks. Topping the list is support for Encrypted Client Hello (ECH), a privacy standard that p…
Paubox Is G2’s Highest-Rated Email Encryption and HIPAA Compliant Messaging Software for Fall 2026 – Business Wire
Paubox Is G2's Highest-Rated Email Encryption and HIPAA Compliant Messaging Software for Fall 2026 Business Wire
Boston Scientific says cyberattack has disrupted product manufacturing
The attack has affected the company’s ability to manufacture products and to process and ship customers’ orders, and there is still no timeline for restoration.
ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nucl…
19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code
Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocurrency draining capabilities. The extensions, per Socket security researcher Ka…
Seeing The Score, Missing The Risk
By Mark Ferrari - Healthcare has gotten very good at producing third-party risk scores. We have platforms, dashboards, questionnaires, and assessments that can generate a number for almost any vendor relationship. Leaders like scores. They are simple. They are comparable. They fi…
Abbott wins CE mark for new LAA closure device
With Amulet 360, Abbott aims to capture share from Boston Scientific in the market for devices that seal the heart’s left atrial appendage to reduce stroke risk.
AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?
AI is accelerating vulnerability discovery, putting pressure on systems built to enrich, prioritize, and remediate flaws at a slower pace. Action1 explains why defenders increasingly need to correlate multiple intelligence sources and turn vulnerability data into faster remediati…
You Need Cyber Deception for OT
The frustrating reality after an OT cyberattack: no data, no trail, and no history.
Defining an AI Kill Switch Is Hard, But Necessary
Proposed legislation could mandate that companies be able to "throttle, suspend, or shut ... down" AI agents, but how and when to do that remain open questions.
The Vulnpocalypse Is Repricing the Bug Bounty Economy
The surge of AI-powered vulnerability reports is driving down bug bounty prices, and that could spell trouble for independent researchers.
Over 8,300 Gitea servers vulnerable to code execution attacks
Over 8,300 Internet-exposed Gitea instances are still unpatched against a critical security flaw exploited in ongoing remote code execution attacks, according to cybersecurity watchdog Shadowserver. [...]