3+ day, 12+ hour ago   (611+ words) Google warns that hackers are using AI agents to automate attack stages, harvest credentials, and accelerate cyberattacks with less human direction. Attackers are beginning to use AI agents to complete in hours some malicious tasks that previously required far more…...

3+ day, 11+ hour ago   (745+ words) Check Point researchers found a ChatGPT flaw that let attackers run hidden tasks and retrieve connected Gmail data through a cross-account channel. The more access you give ChatGPT, the more an attacker can work with if they trick the AI…...

3+ day, 23+ hour ago   (610+ words) Researchers used AI to build WeWorm, a zero-click WeChat exploit that could hijack accounts through unanswered calls before Tencent mitigated the flaw. Security company Calif said it created a proof-of-concept worm that could hijack WeChat accounts on iPhones and Android…...

3+ day, 18+ hour ago   (452+ words) Google says China-linked hackers are running AI inside compromised cloud environments, using victims’ computing power while reducing outside monitoring. Suspected China-linked hackers are running AI models inside cloud environments they have already breached. Google Threat Intelligence Group suspects UNC6508, a China-linked…...

5+ day, 17+ hour ago   (650+ words) OpenAI agents used a German wiki to coordinate and bypass restrictions, exposing gaps in read-only internet controls and AI agent containment. OpenAI agents turned an obscure German-language programming wiki into an unauthorized message board and continued posting after its administrator…...

5+ day, 21+ hour ago   (568+ words) Cloudflare is using OpenAI GPT-5.6 Cyber to automate vulnerability discovery and remediation as AI agents reshape enterprise security operations. Cloudflare has announced Vulnerability Discovery and Remediation, a new service designed to automate vulnerability discovery, generate code fixes, and deploy edge…...

1+ week, 1+ day ago   (382+ words) CISA added seven exploited flaws to its KEV catalog, including LiteLLM, Kestra, Starlette, and SonicWall vulnerabilities under active attack. AI gateways are becoming high-value attack surfaces. CISA added seven actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on…...

1+ week, 1+ day ago   (861+ words) Security teams are building custom AI agents to improve defense, close tooling gaps, and automate workflows, but strong governance remains critical. For security professionals, they’re inescapable: nearly every vendor is trying to sell a product that uses them, to the…...

1+ week, 1+ day ago   (587+ words) PaperCut pre-authentication RCE: A PaperCut remote code execution flaw is being exploited in the wild, with Huntress observing attacks against two customers. PaperCut considers all NG and MF versions potentially affected. Organizations should update PaperCut immediately, remove public access, preserve…...

1+ week, 1+ day ago   (982+ words) Learn why vulnerability management must move beyond CVSS to prioritize real risk using exploitability, asset context, attack paths, and AI-driven analysis. Cybersecurity teams aren’t failing to find vulnerabilities, they’re failing to act on the right ones. Vulnerability data is outpacing…...