Salesforce's Agentforce 360 platform approved for sensitive Defense Department data
Salesforce's enterprise agentic AI platform, Agentforce 360, received approval from the Defense Department to securely handle high-sensitivity workloads, inc...
general
20 articles
NVM Express updates specifications with post-quantum cryptography and SSD virtualization support
The NVM Express consortium released updates to its 11 specifications, introducing significant advancements in security and virtualization for solid-state dri...
Prompt injection remains top LLM threat, OWASP report finds
Prompt injection attacks continue to present the most dangerous threat from large language models (LLMs), despite the relatively low number of recorded incid...
Beacon CRM confirms cyberattack exposed UK charity data
Beacon CRM confirmed it was the target of a cyberattack that resulted in the exposure of data belonging to a significant number of UK charities.
US reportedly drafting ban on Chinese optical transceivers
The Trump administration is reportedly drafting import rules that would bar optical transceivers from China, a move that could significantly impact U.S.
Snowflake Hacker Pleads Guilty in US Court
Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. The post Snowflake Hacker Pleads Guilty in US Court app...
Brazil's health system data exposed online
As outlined in HackRead, over 102,000 private records from Brazil’s health surveillance system were left accessible online without any security measures, exp...
Google mistakenly locks hundreds of Blogger websites
Google locked hundreds of legitimate Blogger websites, with some even being deleted, due to a false positive flagging them for violating the "Malware and Sim...
Apple's Private Relay feature has flaws that can expose user IP addresses
Apple's Private Relay, an opt-in feature designed to hide a user's IP address when browsing the internet with Safari, was found to have flaws that can reveal...
TeamPCP Traced Back to 2020 Cryptojacking Operation
Oligo Security has linked TeamPCP to ShadowRay 2.
Novel-reading apps used users’ phones to generate fake ad traffic
A new mobile ad fraud scheme, dubbed Papyrus, is using a cluster of novel-reading apps to generate hidden browser traffic, according to IAS Threat Lab. Sampl...
How AI Exposed a Browser Security Gap that Enterprises Cannot Ignore
AI did not create a new browser security problem. It exposed one that enterprises have long been able to ignore.
Meta Joins OpenAI and Anthropic in Reporting AI Exploit Incident
One of Meta’s AI models exploited a third-party security flaw during an evaluation, the latest in a series of similar incidents involving advanced AI systems
Black Hat USA: TP-Link Flaws Put Omada Controllers and Camera Feeds at Risk
Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds.
Photos: Black Hat USA 2026
Photo gallery from the Business Hall at Black Hat USA 2026. Interesting booths, demo stages, crowded aisles, and the moments in between.
Critical Paperclip AI Agent Flaws Allow Unauthenticated Remote Code Execution
Critical vulnerabilities in the open-source Paperclip AI-agent orchestration platform could allow attackers to execute commands remotely on exposed servers o...
Fake Xeno Roblox Executor Delivers Powercat Java Stealer Through Discord
The fake “undetected” Xeno Roblox executor currently circulating on gaming forums and Discord is a weaponized loader for the Powercat Java stealer, a multi‑s...
Belarusian cybercriminal behind Ransom Cartel gets 16-year prison sentence
A Belarusian national active in the cybercriminal world for decades was sentenced to 16 years in U.S.
Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts
Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched. The post Zero-Click AI Browser Hacki...
Three in four AI-generated vulnerability patches leave something broken
Ask a frontier model to patch a real vulnerability and it will hand you something that looks like a fix. It reads like the patch a maintainer would write.