Category: Threat Intel Reports
-
Man-in-the-Prompt: The invisible attack threatening ChatGPT and other AI systems
Man-in-the-Prompt: a new threat targeting AI tools like ChatGPT and Gemini via simple browser extensions, no complex attack needed.———————————————————————————————————————————–A new…
-
Google Awards $250,000 Bounty for Chrome RCE Vulnerability Discovery
Google has awarded a record-breaking $250,000 bounty to security researcher ‘Micky’ for discovering a critical remote code execution vulnerability in…
-
Microsoft IIS Web Deploy Vulnerability Let Attackers Execute Remote Code
A critical vulnerability in the Microsoft Web Deploy tool could allow authenticated attackers to execute remote code on affected systems.The…
-
Multiple ImageMagick Vulnerabilities Cause Memory Corruption and Integer Overflows
Security researchers have uncovered four serious vulnerabilities in ImageMagick, one of the world’s most widely used open-source image processing software…
-
F5 Fixes HTTP/2 Vulnerability Enabling Massive DoS Attacks
F5 Networks has disclosed a new HTTP/2 vulnerability affecting multiple BIG-IP products that could allow remote attackers to launch denial-of-service…
-
ERMAC v3.0 Banking Malware Source Code Exposed via Weak Password ‘changemeplease’
Researchers at Hunt.io have made a significant discovery in the cybersecurity field by obtaining and analyzing the complete source code…
-
New Gmail Phishing Attack With Weaponized Login Flow Steals Login Credentials
A sophisticated new phishing campaign targeting Gmail users through a multi-layered attack that uses legitimate Microsoft Dynamics infrastructure to bypass…
-
Hackers Mimic IT Teams to Exploit Microsoft Teams Request to Gain System Remote Access
A sophisticated social engineering campaign by the [EncryptHub](https://cybersecuritynews.com/encrypthub-a-multi-stage-malware/) threat group that combines impersonation tactics with technical exploitation to compromise corporate…
-
Data breach at Fundamental Administrative Services affected 56,235 patients at long-term care facili
On March 21, 2025, Fundamental Administrative Services, LLC (‘Fundamental’), a Maryland-headquartered service provider to long-term care facilities, notified HHS of…
-
NYDFS Secures $2 Million Cybersecurity Settlement with Healthplex, Inc.
There is an update to a phishing incident in 2021 that impacted more than 89,000 people with Healthplex dental insurance.…