AutoGen Studio Flaw Enables Code Execution
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio allows attackers to execute arbitrary commands on a host system by visiting a malicious webpage.
Most bot-management vendors publish no price at all. We collected every figure that is actually on the record — DataDome, AWS WAF Bot Control, reCAPTCHA, hCaptcha, Cloudflare and Imperva — plus the four cost traps that sit behind the headline numbers.
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio allows attackers to execute arbitrary commands on a host system by visiting a malicious webpage.
Microsoft attributes a recent Mastra AI supply chain attack to North Korean hacking group Sapphire Sleet, compromising over 140 npm packages.
Threat actors offer searchable underground services for stolen credentials, allowing buyers to request specific company or platform credentials.
A 21-year-old New York man faces cyberstalking charges for sharing AI-generated nude images and fabricated racist messages to harass a Georgia college student.
The latest ShinyHunters breaches highlight the growing risk of identity-based attacks, where attackers target identities, authentication workflows, and trusted access paths to gain unauthorized access to sensitive data.
Klue has confirmed a security incident where threat actors stole OAuth tokens to access customers' Salesforce environments, with the Icarus hackers claiming responsibility for the attack.
Prinz Eugen ransomware prioritizes recently modified files for encryption, leaving no ransom note on the system, and operates outside the ransomware-as-a-service model.
A USB worm is spreading crypto-stealing malware via Windows shortcut files, targeting cryptocurrency wallets and using the Tor network to conceal communication.
Nintendo of America confirmed that threat actors stole internal survey data from the third-party TinyPulse service, with the Shadowbyt3$ group demanding a $2 million ransom