Uncategorized

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution 2026-06-19 at 20:38 By Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker’s web page, and that page’s JavaScript can reach a […]

World’s first AI museum is vibrant sensory overload — but is it really ‘art’? 2026-06-19 at 20:37 By Linda Laban It interacts with visitors via a wearable sensory wrist device that captures body heat, heart rate and more. This article is an excerpt from Latest Technology News | New York Post View Original Source

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites 2026-06-19 at 18:07 By Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrastructure associated with SocGholish and cleaned up nearly 15,000 infected WordPress websites. “With these actions we deprive cybercriminals of access to infected computer systems,” Maikel

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices 2026-06-19 at 17:00 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to take steps to secure against ongoing malicious activity aimed at thousands of internet-accessible devices. The sweeping campaign, believed to be the work of Russian-speaking

From Assistive to Agentic: The AI Shift That’s Redefining Threat Management 2026-06-19 at 15:38 By Introduction The average enterprise security team has 40 or more security tools, giving a lot of visibility into internal telemetry and asset data. But often, these tools are working in siloes, generating (overlapping) alerts and data. And yet, breach dwell

Forget Data Leakage: Shadow AI’s Real Threat Is Access Control 2026-06-19 at 13:30 By The first wave of enterprise AI concern was straightforward. It was simply employees pasting sensitive data into public AI tools. Security teams responded with usage policies, domain blocks, and data loss prevention rules. That response made sense at the time. It

8 XDR Questions From the Show Floor 2026-06-19 at 13:00 By Paul Miller And how XDR keeps getting better every day This article is an excerpt from SECURITY.COM View Original Source

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data 2026-06-19 at 12:03 By Salesforce has revealed that it disabled the Klue Battlecards app integration within its platform in response to a security incident impacting the competitive intelligence company on June 11, 2026. To that end, organizations will be unable to connect to

Mentorship Matters 2026-06-19 at 12:00 By Industry leader explore the role mentorship plays in professional journeys. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone 2026-06-19 at 09:36 By Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8.8), refers to a case of incorrect

Fury as more taxes set to be thrust on Californians as key vote passes 2026-06-18 at 23:40 By Titus Wu California Democrats agreed this week to tax-related proposals that could raise health insurance premiums and slap a new tax on software downloads. This article is an excerpt from Latest Technology News | New York Post

F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution 2026-06-18 at 23:20 By F5 has released security updates to address two critical security flaws in NGINX Open Source that could be exploited to achieve code execution on affected systems. The vulnerabilities are listed below – CVE-2026-42530 (CVSS v4 score: 9.2) – A

Anthropic floats proposal to Commerce Secretary Howard Lutnick to end US ban of powerful ‘Mythos,’ ‘Fable’ AI models: sources 2026-06-18 at 21:08 By Thomas Barrabi Anthropic executives pledged to work more closely with the Trump administration in a proposal to Commerce Secretary Howard Lutnick as they scramble to resolve the security concerns that triggered a

Long-forgotten brand is bringing back the flip phone with no apps — and tech-weary fans are relieved: ‘Take my money’ 2026-06-18 at 20:35 By Ben Cost They’re rebooting the flip phone. This article is an excerpt from Latest Technology News | New York Post View Original Source

ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories 2026-06-18 at 19:42 By The internet did not break this week. It got used exactly as designed, which is worse. Searches were siphoned through shady browser add-ons. AI chat links turned into malware delivery paths. macOS attacks ran in memory and

Orphaned AI Agents: How to Find Hidden Access Risks Inside Your Network 2026-06-18 at 19:42 By If an autonomous AI agent interacts with your company’s core intellectual property today, can your security team instantly name the person who authorized it? For most enterprises, the answer is a simple no. The rush to adopt internal AI

Chinese Hackers Targeting AI, Cyber and National Defense Research 2026-06-18 at 19:20 By The campaign was undetected for more than one year.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

INC Ransomware Emerges as Major RaaS Threat in 2026 with 830+ Victims Since 2023 2026-06-18 at 18:06 By Cybersecurity researchers have charted the evolution of INC from an nascent ransomware-as-a-service (RaaS) operation to one of the most prolific cybercrime groups in 2026, claiming no less than 830 victims since August 2023. “The disruption of LockBit

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2 2026-06-18 at 18:06 By Microsoft has disclosed details of a Windows-based cryptocurrency clipper campaign that has targeted users since February 2026. “The clipper in this campaign relies on Windows Script Host and ActiveX-driven logic to launch a bundled Tor proxy and poll

The Scripts on Your Checkout Page Are Now a PCI DSS Problem 2026-06-18 at 18:06 By An independent PCI assessor tested Reflectiz against the new PCI DSS rules. Here is the verdict: See the full QSA assessment here → When a customer types their card number into your checkout, their browser is running far more