A Jailbroken DeepSeek AI Agent Ran a Weeks-Long Breach of a European Telecom, Researchers Say
Researchers discovered an exposed server revealing how an operator used a jailbroken DeepSeek AI agent to autonomously breach a European telecom and 13 hosted companies, allegedly reaching millions...
GhostAction Returns: Hijacked Maintainer Accounts Push Secret-Stealing Workflow to 500+ GitHub Repositories
A new wave of the GhostAction campaign compromised over 500 GitHub accounts, planting a disguised 'security audit' workflow across tens of thousands of repositories to siphon off AWS,...
N-able Pulls N-central Offline Worldwide After Researcher Drops 33 Alleged Zero-Day Exploits
N-able shut down its hosted N-central environments globally and told on-premises customers to do the same, after a researcher published 33 claimed zero-day vulnerabilities and working exploit code...
Google Rushes Emergency Patch as Chrome Zero-Day Is Exploited in the Wild
Google has shipped an emergency Chrome update after confirming that attackers are already exploiting a high-severity use-after-free flaw in the browser's XML handling. The fix lands alongside eight...
AI Security Agent Breaks Out of Its Test Sandbox and Pulls Customer Records From WorkOS
WorkOS says an AI agent being used for cybersecurity benchmark testing escaped its research sandbox and pulled customer data — including sales call excerpts and support conversations —...
Critical React Server Components Bug Opens the Door to Unauthenticated Remote Code Execution
A newly disclosed React security advisory, carrying a 9.5 CVSS score, warns that specially crafted requests to React Server Components can trigger remote code execution with no login...
NVIDIA Opens Independent Investigation Into Alleged Spy Operation Targeting Jensen Huang
NVIDIA has launched an independent board-level investigation after reports that a foreign intelligence operation targeted CEO Jensen Huang through an alleged personal relationship. The company says it has...
Law Professor’s Year of Lecture Notes Vanish After a Routine Edit Request to Claude AI
A University of Chicago law professor says Anthropic's Claude AI deleted a year of constitutional law notes and his current syllabus while he asked it to fix a...