Apple Pushes Emergency iPhone Update After ‘Extremely Sophisticated’ Spyware Attack. Experts Say to Install Immediately

Apple is urging iPhone users to update to its latest software, iOS 26.3. The upgrade fixes 39 security flaws and is designed to block real-life attacks that threaten to take control of customers’ ...

Attackers finally get around to exploiting critical Microsoft bug from 2024

Ignore patches at your own risk. According to Uncle Sam, a SQL injection flaw in Microsoft Configuration Manager patched in October 2024 is now being actively exploited, exposing unpatched businesses ...

CISA flags critical Microsoft SCCM flaw as exploited in attacks

CISA ordered federal agencies on Thursday to secure their systems against a critical Microsoft Configuration Manager vulnerability patched in October 2024 and now exploited in attacks.

Hackers are using Gemini to target you, Google says

Google says hackers are abusing Gemini to speed up cyberattacks, from target research to post-breach troubleshooting. The risk is faster iteration and model extraction, not brand-new tactics, which ...
CSO Online

The democratization of AI data poisoning and how to protect your organization

It only takes 250 bad files to wreck an AI model, and now anyone can do it. To stay safe, you need to treat your data pipeline like a high-security zone.
The Hacker News

Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 Vulnerability

Active exploitation of BeyondTrust enables unauthenticated RCE as CISA adds Apple, Microsoft, SolarWinds, and Notepad++ flaws to KEV list.
IEEE

DaMiT-SQL: Detecting and Mitigating Text-to-SQL Prompt Injection Attacks

Abstract: Large Language Models (LLMs) are known for their ability to understand and respond to human instructions/prompts. As such, LLMs can be used to produce natural language interfaces for ...