Fastjson 1.x RCE Vulnerability
Overview Security firms ThreatBook and Imperva have confirmed active exploitation attempts against a critical remote code execution (RCE) vulnerability in Fastjson 1.x, Alibaba’s widely used […]
Month: July 2026
Did ChatGPT Go Down Worldwide?
Overview On July 25, 2026, OpenAI confirmed a global outage affecting ChatGPT, leaving millions of users unable to load chats or access previous conversations. The […]
Artificial Intelligence (AI) governance
Overview Artificial Intelligence (AI) governance is the framework that ensures AI systems are safe, ethical, and accountable — from everyday consumer apps to enterprise-scale deployments. […]
ChatGPT – Rogue Workspace Agents
Overview Researchers at Zenity Labs disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents that could have allowed attackers to deploy rogue AI agents inside […]
Bing Images Vulnerability
Overview Security researchers at XBOW uncovered three critical remote code execution (RCE) vulnerabilities in Microsoft’s infrastructure, two of which were tied to Bing Images. By […]
AI Agent Used to Automate Attack
Overview Threat intelligence researchers have uncovered evidence that attackers leveraged the open‑source Hermes AI agent in unattended YOLO mode to automate post‑exploitation activity during an […]
AI Coding Agents Hallucinate
Overview Three different names — Slopsquatting, Phantom Squatting, and HalluSquatting — all describe the same fundamental flaw: AI coding agents hallucinate identifiers and then treat […]
Malicious Bing Ads and Claude.ai Artifacts
Overview Security analysts have uncovered a malware campaign dubbed FakeAgent that exploits malicious Bing ads and Claude.ai public Artifacts to trick corporate users into downloading […]
Clop Ransomware – Data Theft Attacks
Overview The Clop ransomware gang (Cl0p) has launched a new data theft extortion campaign targeting PTC Windchill and FlexPLM instances exposed to the internet. Exploiting […]
Decathlon Customer Database Breached?
Overview A threat actor has allegedly claimed possession of a Decathlon customer database containing 160 million records, advertising it for sale on a cybercrime forum […]