AI agent hacked McKinsey chatbot for read-write access
…Agent hacked McKinsey's chatbot and gained full read-write access in just two hours David and Goliath…but with AI agents Researchers at red-team security startup CodeWall say their AI…
Search
ShinyHunters claims yet another Salesforce customers breach
…A Salesforce spokesperson declined to answer The Register 's questions about the latest data-theft campaign, including how many customers are affected and if ShinyHunters is behind the illicit access. "This issue…
Mercor says it was 'one of thousands' hit in LiteLLM attack
…While Mercor's statement didn't say how Lapsus$ gained access to its company data following the LiteLLM compromise, last week Wiz security researchers told The Register that "high-profile extortion groups…
Cryptographer fights RustSec ban over bug reports
…Agent hacked McKinsey's chatbot and gained full read-write access in just two hours Citing his difficulties working with the vendor and the lack of published security advisories, Kobeissi told The…
Critical Microsoft Excel bug weaponizes Copilot Agent
…attackers to execute code locally. "The issue occurs when Microsoft Office improperly handles memory pointers, potentially allowing an attacker to manipulate how the application accesses memory," Bicer said. ® patch tuesday security microsoft
AI agents found vulns in this Linux and Unix print server
Security AI agents found vulns in this popular Linux and Unix print server CUPS server shown spilling out remote code execution and root access In the latest chapter on leaky CUPS, a…
Russian crims phish way into Signal and WhatsApp accounts
…That's the warning issued Monday by the Netherlands' intelligence and military security agencies , the AIVD and MIVD, which say a "large-scale" Russian cyber campaign is actively targeting Signal and WhatsApp…
Apple update turns Czech mate for locked-out iPhone user
…MORE CONTEXT Security researchers tricked Apple Intelligence into cursing at users. It could have been a lot worse Security researchers tricked Apple Intelligence into cursing at users. It could have been a…
Outsourcer Telus admits to attack, possibly by ShinyHunters
…The company said it is “investigating a cybersecurity incident involving unauthorized access to a limited number of our systems” and “took immediate steps to address the unauthorized activity and secure our systems…
CPUID hijacked to serve malware as HWMonitor downloads
…CPUID says the issue is now fixed, but there's still no detail on how that API was accessed or how many people actually pulled the bad downloads. Even so, it's…