Uncategorized

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats 2026-06-17 at 12:38 By Cybersecurity researchers have flagged a “coordinated malware campaign” on the JetBrains Marketplace that has published no less than 15 malicious plugins capable of exfiltrating artificial intelligence (AI) provider keys. “Every plugin poses as an AI coding assistant built […]

Organizations’ Emergency Response Fails to Match Confidence Levels 2026-06-17 at 12:00 By Organizations overestimate their emergency response; Almost 50% of organizations faced a lateral movement attack in the last year. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

144 Mastra npm Packages Compromised via Hijacked Contributor Account 2026-06-17 at 10:38 By As many as 144 npm packages associated with the Mastra namespace (“@mastra/*”), a popular open-source JavaScript and TypeScript framework for building artificial intelligence (AI) applications, have been compromised as part of a software supply chain attack codenamed easy-day-js, per findings from JFrog,

CISA Warns of Actively Exploited Joomla JCE Flaw Allowing PHP Code Execution 2026-06-17 at 08:50 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting Widget Factory Joomla Content Editor (JCE) to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-48907

Thornton Township High School District Implements ZeroEyes 2026-06-17 at 07:00 By Illinois’ Thornton Township High School District 205 announces a deployment of ZeroEyes AI gun detection solution.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Florida suing TikTok for allegedly exposing kids to harmful content and decieving parents 2026-06-17 at 05:51 By Fox News State seeks court order forcing ByteDance to modify its platform and up to $50K in penalties per violation. This article is an excerpt from Latest Technology News | New York Post View Original Source

Panic over data centers is wildly exaggerated — they use less water than golf courses and less energy than the USA’s fridges 2026-06-17 at 02:16 By Rikki Schlott Young people have plenty of reasons to be concerned about AI. But they should focus on the real ones, instead of peddling misinformation. This article is an

Apple to launch AI-juiced AirPods and sunglasses, going head-to-head with Meta 2026-06-17 at 00:36 By Marc Vartabedian Apple is preparing for a huge wave of new product releases – including camera-equipped AirPods which will launch the company into the red-hot AI device market and rival Meta’s AI-enabled camera sunglasses. Apple’s camera AirPods marks an escalation

CA Dems could stick families with higher insurance costs — and new tax on software downloads 2026-06-17 at 00:28 By Titus Wu California Democrats agreed this week to tax-related proposals that could raise health insurance premiums and slap a new tax on software downloads — as critics blast the deal for piling on costs at

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting 2026-06-17 at 00:14 By A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim’s project hijack the victim’s machine learning model upload and run code inside Google’s serving infrastructure. Palo Alto Networks

Snap unveils ‘Specs’ augmented reality glasses with $2,195 price — and goal of replacing smartphones 2026-06-16 at 21:43 By Thomas Barrabi Featuring about four hours of battery life, Specs will be capable running apps via an overlay that will blend seamlessly as the user goes about their daily life, according to Snap. This article is

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures 2026-06-16 at 20:41 By Cybersecurity researchers have flagged multiple ClickFix campaigns that deliver three malware loaders called BabaDeda Loader, Lorem Ipsum Loader, and Potemkin, per independent reports from Morphisec, BlueVoyant, and Huntress, respectively. Attacks involving BabaDeda Loader, observed in April 2026, have targeted

Error in Breach Notice Leaves Victims Confused, Skeptical 2026-06-16 at 20:30 By Patients received notices after a hospital data breach — but the letters looked like scams.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Trump Signs National Security Memo to Bolster Military, Intelligence System Cybersecurity 2026-06-16 at 20:00 By President Trump signed a new National Security Presidential Memorandum to support the nation’s National Security Systems (NSS). This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Update on the Cal Water Hacking Incident 2026-06-16 at 18:41 By Cal Water has responded following the claims of a cybersecurity incident.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

DoorDash down as thousands of users report Tuesday morning freeze 2026-06-16 at 18:34 By Aurielle Weiss Over 36,000 DoorDash users have reported platform issues on Tuesday morning according to a Downdetector post. This article is an excerpt from Latest Technology News | New York Post View Original Source

New Rokarolla Android Malware Steals PINs, SMS Codes, and Crypto Wallet Funds 2026-06-16 at 16:10 By Security researchers at Zimperium’s zLabs have documented a new Android banking trojan, Rokarolla, that targets 217 banking and cryptocurrency apps and packs 137 remote commands. Together, they give an operator near-total control of an infected phone: it lifts lock-screen PINs, reads

3D printing company Divergent unveils technology to increase output by 8x: ‘Respond to changing demand far more quickly’ 2026-06-16 at 15:01 By Lydia Moynihan “What is clear is that defense industry leaders recognize the need for greater production capacity across a range of systems,” Divergent’s Lukas Czinger said. This article is an excerpt from Latest

Survey: 94% of Incidents Involve Anonymized Infrastructure. Teams Are Still Reactive 2026-06-16 at 14:30 By Security teams have never had more IP data at their disposal. Every day, analysts ingest enrichment feeds, geolocation data, reputation scores, telemetry, and threat intelligence from a growing ecosystem of vendors and platforms. Yet despite this abundance of information, many

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week 2026-06-16 at 13:30 By Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours. CVE-2026-39813