Northflank security breach leads to abuse of customers’ AI API keys
Cloud application hosting platform Northflank is warning customers to rotate all credentials and secrets stored on its platform after a
Chainalysis Confirms Intrusion Into Internal Tools and Exposure of Customer Identity Data
Ravie LakshmananOct 31, 2026Data Security / Cyber Attack American blockchain analysis firm Chainalysis said it was the target of a
Cursor Confirms Malicious Claude Code Extension With SSH Backdoor Was Available for 11 Hours
Cursor has confirmed that malicious Claude Code extension packages were available through its VS Code Extension Marketplace for roughly 11
Attackers Chain Three Ivanti Connect Secure Flaws to Gain Unauthenticated Root Access
Ravie LakshmananOct 31, 2026Vulnerability / Cyber Attack The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security
Over 60,000 Attacks Target WordPress RCE Vulnerability Within 24 Hours
Hackers are targeting a WordPress Core remote code execution vulnerability that can expose websites during software updates. The supplied Wordfence
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
Swati KhandelwalOct 31, 2026Vulnerability / Web Security A malicious ChatGPT share link could run an attacker’s code in the logged-in
Google Launches Gemini 4 Carbon With State-Of-The-Art Cybersecurity Capabilities
Google has announced Gemini 4 Carbon, its latest AI model built to find software flaws, test whether attackers could exploit
Critical Linux kernel flaw allows remote root attacks on MPTCP servers
Security researchers at Anthropic have developed an exploit for a critical Linux kernel vulnerability that allows unauthenticated attackers to remotely
Chinese Hackers Use AI-Powered ARTEX to Target Over 200 Organizations Worldwide
Chinese state-sponsored threat actors have been observed using a Go-based artificial intelligence (AI)-powered penetration testing framework called ARTEX in attacks
North Korean Hackers Steal Developer Credentials to Inject Malware Into GitHub and Software Packages
A North Korea-aligned hacking group has moved beyond fake job interviews and now steals developer credentials to plant malware in
When Threats Dont Wait, Security Cant Either
Dhananjay Ganjoo, Managing Director – India & SAARC The uncomfortable part of an adaptive attack is not how quickly it
SS7 and Diameter Attacks: How Signaling Flaws Expose Your Phone
SS7 and Diameter signaling attacks can track, intercept, and impersonate you. Here’s how they work and how to stop them.