US cyber officials warn AI is giving attackers an edge
FBI and CISA officials warn AI could accelerate cyberattacks as agencies bolster U.S.
SC Media
20 articles
Stop bracing for the AI monster – fix the boring stuff first
A focus on security hygiene won’t grab headlines – but it’s what teams need to focus on, even in this new AI era.
AI agent exploits gym booking system vulnerability
As detailed in Security Affairs, an Australian man's attempt to use an AI assistant for a simple gym booking resulted in the system exploiting a vulnerabilit...
Mozilla issues new GPG key after accidental exposure
The exposed GPG key was used to sign artifacts like Linux tarballs and RPM packages.
‘GhostJacking’ attack turns error logs into indirect prompt injections
Attacks targeting Cloudflare, DataDog and Sentry MCP integrations were demonstrated at DEF CON 34.
Using LLMs for Vuln Discovery - Rishi Sharma - ASW #395
Security researchers accidentally receive sensitive data through misconfigured email domains
Companies are sending sensitive data, including injury reports, pizza orders, and test credentials, to domains like @noreply.us and @noreply.
Klaviyo data leak: Customer sign-up info, including passwords, shared with advertisers
The misconfiguration on Klaviyo's sign-up page allowed any third-party trackers present on the site to potentially access and share sensitive customer data.
LexisNexis services offline due to unusual activity on third-party vendor servers
The unusual activity was detected earlier this week on servers hosted and managed by a third-party vendor, prompting LexisNexis to disconnect from these syst...
Storm-1175 actor deploys new StormEncryptor ransomware after N-central vulnerability exploitation
Microsoft Threat Intelligence indicates that Storm-1175, believed to be China-based, likely exploited an authentication-bypass vulnerability (CVE-2026-18577)...
HP ThinPro vulnerability allows physical attackers to bypass disk encryption
176 vulnerabilities discovered in Samsung mobile apps
The vulnerabilities were found in Samsung's proprietary system apps, which cannot be uninstalled by users and operate outside the protection of Google Play P...
Israeli population registry data from 2005 resurfaces on dark web
A vendor, identified as "Gordon Freeman," advertised a 7.5 GB database allegedly containing national ID numbers, addresses, phone numbers, birth and death da...
FirewallFalcon tool found hijacking network traffic
Researchers identified that FirewallFalcon Manager secretly redirects traffic, weakens server security, and in older versions, installs a universal SSH backd...
Attackers breach Polish CHP plant using private APN and Fortinet device
The intrusion began at a wind farm where attackers compromised a Fortinet VPN and firewall device.
Progress LoadMaster bug added to CISA list of exploited vulnerabilities
CISA warns of active Progress LoadMaster attacks; patch and investigate now.
Attack Surface Management - Matt Lea - CSP #227
Four AI agent governance mistakes to avoid
Most teams are just starting to reckon with the impact of AI agents on the enterprise – here’s how to get started.
Talk to the LLM: How AI exposes 'pig butchering' scams
A security researcher is using AI to study and expose long-duration scams that abuse online trust.
Ransomware attacks increasingly target managers, not just CEOs
Ransomware campaigns are becoming more sophisticated, moving away from broad attacks to highly targeted extortion.