Cybersecurity News
-
Uncovered Side-Channel Attack Threatens AI Chatbot Privacy
Cybersecurity researchers at Microsoft have identified a critical vulnerability that could allow attackers to determine conversation topics with AI chatbots, even when communications are fully encrypted. Microsoft’s Defender Security Research Team has…
-
Tenable Discovers Critical ChatGPT Vulnerabilities Enabling Private Data Theft
Tenable Research has disclosed multiple vulnerabilities in OpenAI’s ChatGPT that could allow attackers to steal private information from users’ memories and chat history without their knowledge. The vulnerabilities, discovered through months of…
-
QNAP Patches Critical SQL Injection Vulnerability in QuMagie Photo Management App
QNAP has released security updates addressing multiple critical vulnerabilities in several of its applications, including a severe SQL injection flaw in QuMagie, the company’s photo management application for network-attached storage (NAS) devices.…
-
Google Detects First Malware That Calls AI Models During Live Attacks
Google’s TAG (Threat Intelligence Group) has reported identification of malware actively querying AI language models during attacks to generate code on the fly and evade detection. The discovery marks a shift from…
-
Microsoft Patches Teams Vulnerabilities That Enabled Executive Impersonation
Four security flaws allowed message manipulation and caller ID spoofing; all issues resolved after responsible disclosureFour security flaws in Microsoft Teams has that allowed attackers to impersonate executives, manipulate messages, and forge…
-
Google Chrome 142 Update Available With Critical Security Fixes
Google has recently pushed out an urgent Chrome security update, patching five vulnerabilities that could leave users exposed to attacks while browsing. Three of the flaws are rated high-severity, prompting security experts…
-
Microsoft Patches Critical Edge Browser Vulnerability
Microsoft has released an important security update for its Edge browser, addressing a remote code execution vulnerability that could allow attackers to run malicious code on users’ systems. Here’s what you need…
-
WordPress SMTP Plugin Vulnerability Exposes 400,000 WordPress Sites to Account Takeover
Over 4,500 exploitation attempts already blocked as attackers target critical flaw allowing password reset hijackingA severe security vulnerability in the Post SMTP WordPress plugin has left more than 400,000 websites exposed to…
-
Security Flaw in UniFi Access Patched
Ubiquiti Networks has disclosed and patched a critical security vulnerability in its UniFi Access application that could have allowed attackers to bypass authentication and gain unauthorized control over door access systems. If…