Security
Showing 12 of 140 articles · Page 1 of 12

AI Code Editors Face Sandbox Escape Vulnerabilities Across Multiple Platforms
AI code editors Cursor, Codex, and Gemini CLI vulnerable to sandbox escapes. Latest patches released.

Romanian Land Registry Hacked: Entire Property Database Wiped in Major Cyberattack
Romanian land registry database completely wiped by hacker, paralyzing real estate market. Valid credentials used to access systems and destroy backups.

WordPress Security Alert: Critical SQL Injection and API Vulnerabilities Under Active Exploit
WordPress alerts users of critical SQL injection and API vulnerabilities being actively exploited. Update to patch CVE-2026-60137 and CVE-2026-63030 now.

Hacker Leak Exposes Suno's Massive Music Scraping Operation
Leaked code reveals Suno scraped 2 million YouTube clips and 113k hours of YouTube Music to train AI models, fueling copyright concerns.

Grok Build Caught Sending Entire User Repositories to SpaceX Servers
Grok Build exposed user repositories and SSH keys to SpaceX servers. SpaceX disabled the feature and offers privacy controls to limit data collection.

Security Researcher Sentenced to 4 Years for Secretly Aiding BlackCat Ransomware Gang
Security researcher sentenced to 4 years for conspiring with BlackCat ransomware gang while posing as a legitimate negotiation advisor.

DuckDuckGo Browser Now Blocks YouTube Ads by Default
DuckDuckGo browser now blocks YouTube ads by default on iOS, Mac, and Windows using uBlock Origin filter lists.

GitHub Copilot Prompt Injection Vulnerability Leaks Private Data
New GitLost vulnerability in GitHub Copilot allows private repository data leaks via prompt injection in public issues. No coding or credentials required.

GuardFall Exploit Targets AI Coding Agents via Bash Vulnerabilities
New GuardFall vulnerability allows attackers to exploit AI coding agents using Bash techniques to steal credentials and compromise CI/CD pipelines.

WhatsApp Usernames May Fuel New Phishing and Identity Scams
WhatsApp usernames could lead to an increase in phishing and identity scams. Learn how impersonators might mimic public figures and what Meta is doing.

US Offers $10 Million Reward for WhatsApp and Signal Hackers
The US offers a $10 million reward for information on UNC5792 and UNC4221 hackers targeting WhatsApp and Signal users, including crypto and server data.

Polymarket User Funds Compromised in Third-Party Provider Breach
Polymarket confirms a third-party hack leading to an estimated $3M theft. The platform promises full refunds for all affected users as the breach is contained.