2026

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface 2026-05-29 at 22:14 By Cybersecurity researchers have disclosed details of a vulnerability in OpenAI ChatGPT that leverages the artificial intelligence (AI) assistant’s implicit trust in Markdown links and images to trigger prompt injections and open the door to phishing attacks. The technique has been codenamed […]

Temporary ‘smart tattoo’ could catch skin cancer before it’s visible 2026-05-29 at 21:24 By Reda Wigle Finally, a new use for temporary tattoos beyond kiddie goodie bags. This article is an excerpt from Latest Technology News | New York Post View Original Source

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit 2026-05-29 at 21:23 By An unknown threat actor has been observed using a large language model (LLM) agent to conduct post-compromise actions after obtaining initial access following the exploitation of a publicly-accessible Marimo network using a recently disclosed vulnerability. “The attacker compromised an internet-reachable Marimo

New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks 2026-05-29 at 18:31 By A previously undocumented threat actor dubbed GREYVIBE has been attributed to ongoing and persistent attacks targeting Ukraine and Ukraine-related entities since at least August 2025. GREYVIBE, per WithSecure, is assessed to be a Russian-speaking group operating broadly in the Russian time zone, with

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks 2026-05-29 at 18:31 By Shadow AI used to mean employees pasting things they shouldn’t into ChatGPT. It now means something bigger: employees building full applications with AI, wiring them into production systems, and publishing them on the open internet. Without Security or

Risks of Robinhood Using AI Agents to Trade, Make Purchases 2026-05-29 at 18:00 By Robinhood is enabling AI agents to trade and make credit card purchases on behalf of users.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets 2026-05-29 at 14:08 By Cybersecurity researchers have discovered a malicious NuGet package that masquerades as a C# software development kit for Sicoob, one of Brazil’s largest cooperative financial systems, to siphon client IDs and PFX certificates. According to Socket, versions 2.0.0 through 2.0.4