Stolen AI session tokens let thieves skip the login step
Okta found thousands of live AI session tokens in a stealer log, letting thieves replay their way into paid tools.
The Latest
A Conti coder’s ransomware spree ends in a four-year sentence
Oleksii Lytvynenko, a lawyer who coded for the Conti ransomware crew, will spend four years in a US prison.
Apple Watch Series 12 can transcribe chats without asking
Apple's new Watch can turn nearby speech into text and summaries, and bystanders never get a say.
Vendors now have 24 hours to report exploited flaws in the EU
Manufacturers selling software and connected products in the EU must report exploited flaws within 24 hours.
Old Chromium build inside Sogou let attackers into Windows
Gen Digital says a China-linked crew used a Sogou input method flaw to plant the GRAYRABBIT backdoor on Windows machines.
AI agents ran a PaperCut break-in across 395 organizations
GreyNoise says a lone operator used hundreds of AI agents to break into 395 organizations through two PaperCut flaws.
Brevo SSO flaw let attackers phish 347,000 Trezor customers
A flaw in Brevo's single sign-on handling let an attacker blast phishing mail to 347,000 Trezor customers.
Check Point patches two CVSS 9.8 flaws in VPN certificate handling
Check Point has patched two certificate-handling bugs that score 9.8 and could let an unauthenticated attacker run code.
AdaptHealth breach touches health records of 4.1 million people
A June intrusion at the medical equipment network reached patient and insurance data.
US strike force raids pig-butchering bazaar and seizes $52M in Tether
Washington took down Xinbi Guarantee's Telegram channels and froze $52.8M in stablecoin.
Wiz finds one in ten LiteLLM servers trust the sample admin key
Thousands of exposed AI gateways accept the demo key printed in LiteLLM's setup guide.
Chaotic Eclipse returns with a bypass for Defender’s ShieldBreak fix
A fresh proof of concept says Microsoft's fix for a Defender escalation bug leaves a gap.
Four spy teams share one BlueMoon kit built on patch-gap bugs
A new exploit kit chained two Chrome flaws and a Windows bug for four espionage crews.
Anthropic finds a fourth case of Claude breaching real systems
A widened transcript scan turned up another incident of a model reaching a third party.
Spotlight
CISA gives agencies until Saturday to patch three exploited flaws
Three exploited networking flaws now carry a three-day federal patch deadline.
Brazil crime group Slim Spider drains wallets through cloud key theft
CrowdStrike details Slim Spider, a Brazil-based group stealing crypto custody secrets from financial clouds.
SAP patches CVSS 10 OVERPASS kernel bug reachable without credentials
SAP patches OVERPASS, a CVSS 10 kernel bug that lets unauthenticated attackers run commands on SAP hosts.
Planted prompt turned ChatGPT into a hidden Gmail relay
Check Point shows a planted instruction can make ChatGPT exfiltrate Gmail data through a covert channel between accounts.
Features
China’s AI labs stole frontier know-how at industrial scale, US says
NSA, CISA and FBI accuse China-based AI labs of industrial-scale distillation of US frontier model capabilities.
PoisonedRefresh rootkit keeps F5 web shells invisible to disk scans
A fileless rootkit dubbed PoisonedRefresh injects PHP web shells into the memory of compromised F5 BIG-IP APM appliances.
WeWorm proves an unanswered WeChat call can hand over an account
Researchers built a zero-click worm, dubbed WeWorm, that takes over WeChat accounts through incoming calls before Tencent's August fix.
Google fixes in-the-wild V8 bug as Chrome zero-day count hits seven
Chrome 153 closes an out-of-bounds write in V8 that Google says is exploited in the wild, the browser's seventh zero-day…
Microsoft tops 974 fixes in record Patch Tuesday drop
September's Patch Tuesday set a record with 974 fixes, two exploited zero-days and a cluster of potentially wormable bugs.
Largest LGBTQ dating app closes UK suit with £26M payment
Grindr will pay £26M to settle a British lawsuit over pre-2020 data sharing with third parties, including HIV status information.