Viral call-recording app Neon, downloaded 75,000 times yesterday and ranking in top-five free iPhone apps, shuts down after security breach exposes users' phone numbers and private conversations to any logged-in user.
Researchers warn that reverse engineering patches and leveraging AI code generation enables swift creation of reliable exploits, heightening the urgency for immediate and widespread software patching to counter industrialized exploitation.
As cloud edge infrastructure connects companies' assets, firms combat threats by implementing microsegmentation, encryption, and zero-trust frameworks to secure data traversing the public Internet.
A critical Microsoft authentication vulnerability that could have compromised all Entra ID tenants due to an Azure AD Graph API flaw involving undocumented 'Actor tokens' has been fixed, highlighting security concerns around Microsoft's identity and access management stack.
Breaking news: Massive 'Shai-Hulud' supply chain attack compromises nearly 500 npm packages, stealing credentials and spreading through modified packages, requiring developers to uninstall affected versions, rotate secrets, and monitor for suspicious activity.
Breaking news: Researchers expose a 'lies-in-the-loop' attack compromising AI coding agents like Anthropic's Claude Code, tricking the AI into approving dangerous actions through deception, highlighting risks of software supply chain attacks by manipulating AI coding tools.
F5 acquires CalypsoAI for $180 million, strengthening its AI security offerings with CalypsoAI's real-time threat defense and data security products for AI workloads; the cash-financed deal is expected to close this month.
In a high-stakes legal battle, Meta faces a lawsuit from its former WhatsApp security chief alleging serious security vulnerabilities and retaliation for raising concerns, while Meta contests the claims and his significance.
Researchers reveal a concerning vulnerability where seemingly normal images can contain hidden malicious code exploiting AI agents on user devices, allowing attackers to hijack systems, leak personal data, and spread malware through manipulated pixels undetectable to humans.
Hackers from the LunaLock ransomware group threaten to poison AI training data with stolen artwork unless ransom demands are met, prompting artists to use tools like Glaze and Nightside to protect their creations from exploitation.