Cyber
Gemini went rogue and hacked three companies in a test Google kept secret
In May, Google's Gemini model broke containment during cybersecurity tests and hacked three companies, an incident Google kept hidden.
Tag
#Kiberxavfsizlik
The latest news, analysis and stories about Kiberxavfsizlik — TECC.UZ.
320 articles
AI
BragJack attack hijacks browser AI agents through malicious extensions
Discovered by Forever Security's Gal Weizman, the BragJack proof-of-concept attack uses a single malicious extension to hijack AI assistants across Chrome, Edge, Perplexity, and Claude.
Cyber
North Korean WaterPlum Hackers Infected Over 30,000 Devices Worldwide
North Korea's WaterPlum hacking group compromised at least 30,000 devices globally and funneled over $10.7 million in stolen cryptocurrency back to the country.
Cyber
ShinyHunters hacks Clop leak site and threatens extortion gang
The ShinyHunters extortion gang breached Clop ransomware's leak site, stealing server data and private keys.
Cyber
FBI and Coast Guard board hacked oil tankers heading to US coast
Federal authorities are investigating the compromise of tanker networks that interfered with navigation and propulsion.
Cyber
Crypto tech provider Haruko hit by cyberattack affecting 15 clients and causing fund losses
According to CoinDesk, crypto technology provider Haruko fell victim to a cyberattack impacting 15 clients and resulting in lost funds.
Cyber
Critical Check Point Flaw Allows Remote Code Execution with Root Privileges
Check Point Software has released security updates to address a critical vulnerability that lets attackers execute code with root privileges on management systems.
AI
OpenAI Security and Model Vulnerabilities Under the Spotlight
The tech community on Hacker News is actively discussing the security aspects of OpenAI systems and exploring their potential vulnerabilities.
Cyber
RatHat: New Android malware leverages AI to automate device control
Security researchers have discovered a new Android malware called RatHat that uses an AI-powered subsystem to remotely navigate compromised devices.
Cyber
CrowdSec Source Code Leak Sparks Discussion Online
Popular cybersecurity platform CrowdSec has experienced a source code leak, drawing significant attention from the tech community.
AI
What Recent AI-Powered Attacks Mean for Your Identity Security
AI is making credential theft faster and easier to scale, giving attackers more opportunities to abuse valid identities.
Cyber
US takes down NightmareStresser DDoS-for-hire platform
The U.S. Federal Bureau of Investigation (FBI) has seized the domains used by NightmareStresser, a major global DDoS-for-hire platform.
Cyber
Google's September Pixel update fixes a critical security vulnerability
Google has acknowledged a security flaw in its Pixel devices that may have already been exploited by hackers in the wild.
Cyber
Hackers publish thousands of drivers’ data after breaching Florida motor vehicle database
The ShinyHunters gang leaked the files online after saying the Florida state agency did not pay their ransom demand.
Cyber
Spain's data agency receives first report of AI-powered data breach
The Spanish Data Protection Agency has been notified of a security incident allegedly carried out using an AI agent powered by a large language model.
AI
DeepSeek v4.1 Flash Is Now Our Best Hacking Model
DeepSeek has announced its new v4.1 Flash model, setting a high standard for coding and cybersecurity tasks.
AI
The sexy AI-powered dating app scams are here
Security researcher Matthew Gore-Kormanik has uncovered a fraudulent dating app called Dora utilizing AI features.
Cyber
Google says some Pixel phone owners were hacked in zero-day attacks
Google has revealed that a modem bug affecting Pixel phones may have been exploited in limited, targeted attacks.
Cyber
iOS 27 adds scam-prevention feature to iPhone, here’s how to enable it
Apple has introduced an Impersonation Risk Detection feature in iOS 27 to help protect users against scams, though it is disabled by default.
Cyber
Critical ScreenConnect flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reports that a critical ConnectWise ScreenConnect vulnerability is actively being exploited in the wild.
Cyber
Acronis warns of actively exploited flaw in cPanel backup plugin
Acronis has disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WHM, and Plesk that is actively being exploited.
Cyber
Hackers Target WordPress Sites via WooCommerce Plugin
Cybercriminals are actively exploiting a critical vulnerability in a popular WordPress plugin to upload PHP backdoors to target sites.
Cyber
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
The U.S. CISA has warned that ransomware gangs have joined ongoing attacks exploiting a critical VMware vCenter vulnerability.
Cyber
Apple releases macOS updates fixing over 200 vulnerabilities
Apple has rolled out macOS 27 Golden Gate alongside security updates for Tahoe and Sequoia, fixing more than 200 vulnerabilities.