Security Bulletin

The “Echo Chamber” attack achieves harmful outputs without any direct harmful inputs.

Like its predecessor, SparkCat, the new malware appears to be going after sensitive data — such as seed phrases for cryptocurrency wallets — in device photo galleries.

An AI security researcher has developed a proof of concept that uses subtle, seemingly benign prompts to get GPT and Gemini to generate inappropriate content.

Citrix is recommending its customers upgrade their appliances to mitigate potential exploitation of the vulnerabilities.

After President's Trump decision to enter the US into the conflict in the Middle East, the Department of Homeland Security expects there to be an uptick in Iranian hacktivists and state-sponsored actors targeting US systems.

Feds tell companies to prepare for cyberattacks on U.S. systems.

Ichano's "AtHome Camera" is a bit of a different approach to home surveillance cameras [1]. Instead of a hardware camera solution, this product is a software solution that turns existing devices like computers and tablets into webcams. The...

The attack is similar to previous campaigns by an actor called Commando Cat to use misconfigured APIs to compromise containers and deploy cryptocurrency miners.

Reuters reports that AT&T had its $117 million settlement for lawsuits over separate data breach incidents last year that revealed information from millions of its customers approved by U.S. District Judge Ada Brown.

California-based real estate management and investment firm Income Property Investments had more than 170,000 records accidentally leaked as a result of a misconfigured database, Cybernews reports.

Mounting artificial intelligence-based financial deepfake schemes have prompted Sens. John Husted, R-Ohio, and Raphael Warnock, D-Ga., to introduce the Preventing Deep Fake Scams Act that would mandate the establishment of a new task force that would...

Hackread reports that Disneyland Paris had 64 GB claimed to have been compromised by the Anubis ransomware-as-a-service operation, which touted the incident to be "the largest data leak" in Disneyland Park history.