AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCE
Cybersecurity researchers have disclosed details of a new method for exfiltrating sensitive data from artificial intelligence (AI) code execution environments…
LeakNet Ransomware Uses ClickFix via Hacked Sites, Deploys Deno In-Memory Loader
The ransomware operation known as LeakNet has adopted the ClickFix social engineering tactic delivered through compromised websites as an initial…
AI is Everywhere, But CISOs are Still Securing It with Yesterday’s Skills and Tools, Study Finds
î „The Hacker Newsî ‚Mar 17, 2026Artificial Intelligence / Security Leadership A majority of security leaders are struggling to defend AI systems…
Konni Deploys EndRAT Through Phishing, Uses KakaoTalk to Propagate Malware
î „Ravie Lakshmananî ‚Mar 17, 2026Threat Intelligence / Endpoint Security North Korean threat actors have been observed sending phishing to compromise targets…
CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths
î „Ravie Lakshmananî ‚Mar 17, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a medium-severity…
GlassWorm Attack Uses Stolen GitHub Tokens to Force-Push Malware Into Python Repos
î „Ravie Lakshmananî ‚Mar 16, 2026Malware / Cryptocurrency The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages…
Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More
î „Ravie Lakshmananî ‚Mar 16, 2026Cybersecurity / Hacking Some weeks in security feel normal. Then you read a few tabs and get…
ClickFix Campaigns Spread MacSync macOS Infostealer via Fake AI Tool Installers
Three different ClickFix campaigns have been found to act as a delivery vector for the deployment of a macOS information…
Why Security Validation Is Becoming Agentic
If you run security at any reasonably complex organization, your validation stack probably looks something like this: a BAS tool…
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth Espionage
Ukrainian entities have emerged as the target of a new campaign likely orchestrated by threat actors linked to Russia, according…