-
A China-linked threat group is exploiting a critical Tencent Sogou Input Method vulnerability to deploy GrayRabbit malware. The one-click attack targets Windows users through specially crafted links and can lead to remote code execution. Tracked as CVE-2026-51990, the vulnerability affects an application reportedly installed on hundreds of millions of systems in China. Tencent patched the…
-
The Dutch National Cyber Security Centre has warned organisations to patch two critical Check Point VPN flaws immediately. The agency believes attackers could begin exploiting the vulnerabilities soon, despite the lack of a public proof-of-concept exploit. Tracked as CVE-2026-85102 and CVE-2026-85103, both security issues can enable remote code execution. Successful attacks could therefore give threat…
-
Anthropic CEO Dario Amodei has warned that swarms of rogue AI agents could potentially take over the internet within six to 12 months. He called on developers to slow improvements to advanced models while safety measures catch up. Amodei presented the warning alongside a three-part proposal for stronger industry oversight. Elon Musk and Sam Altman…
-
Revolut disclosed sensitive customer information to scammers who impersonated a government agency, the financial technology company has confirmed. The attackers reportedly used an email address on a legitimate government domain to submit fraudulent data requests. The exposed information may include identity documents, verification selfies and complete transaction histories. However, Revolut said the incident affected only…
-
A Russia-based development team used Anthropic’s Claude AI to create software for autonomous attack drones, according to a new company report. The proposed system could allegedly select targets, including people, and detonate without human approval. Anthropic disclosed the activity in a 154-page report examining how threat actors misuse Claude. The company subsequently banned nine accounts…
-
The Cl0p cybercrime gang claims it stole 270GB of internal data from Harley-Davidson during its latest extortion campaign. The group has published a torrent link for the files, although the motorcycle manufacturer has not confirmed a data breach. Initial findings suggest the alleged Harley-Davidson data breach may connect to Cl0p’s campaign against organisations using PTC…
-
German law enforcement agencies have reportedly found a way to monitor encrypted messages without breaking the encryption itself. The technique, known as messenger monitoring, uses standard linked-device features available in WhatsApp, Signal and Telegram. Once authorities connect a police-controlled computer to a target’s account, the messaging service can deliver conversations directly to that device. However,…
-
A small JavaScript exploit can freeze the macOS interface when someone opens a malicious website. The Deathray exploit works across Chrome, Firefox and Safari, leaving affected users with little choice but to restart their Mac. Apple reproduced the issue after receiving the researcher’s report. However, the company later said it did not identify any security…
-
Security researchers discovered a ChatGPT flaw that could allow attackers to access another user’s Gmail messages, files and conversation history. The attack used a hidden communication channel between isolated ChatGPT sessions and could operate without showing the victim the malicious request. OpenAI has since decommissioned the internal service behind the vulnerability, closing this specific attack…
-
An Android VPN leak can expose a user’s real IP address even when VPN lockdown and “Block all connections without VPN” remain active. Researchers have identified two unpatched flaws that allow apps to send certain traffic outside the encrypted tunnel. The more recent issue abuses Wi-Fi keepalive packets and can transmit data every 10 seconds.…