BragJack Exploit Threatens AI Assistants Across Major Browsers
PremiumBragJack PoC lets a malicious browser extension hijack AI assistants in Chrome, Edge, Opera Neon, Comet, and Claude-in-Chrome.
§Source · Cybersecurity News
Cybersecurity News
Every dispatch we have aggregated from Cybersecurity News.
All dispatchesMonday, September 21
Ransomware Groups Shift Focus to AI Models: A New Era of Digital Extortion
PremiumAnalysis of JADEPUFFER shows ransomware groups now target AI/ML models and model recovery chains for extortion and disruption.
Steam Vulnerability Opens Door to SYSTEM Privilege Escalation on Windows
PremiumBrokenPipe PoC abuses Steam Client Service to silently escalate a local standard user to NT AUTHORITY\SYSTEM privileges.
CISA Urges Immediate Action on Exploited Linux Kernel Vulnerabilities
PremiumCISA added multiple Linux kernel CVEs (including CVE-2025-39682, CVE-2026-53266, CVE-2025-39964) to KEV for immediate remediation.
Microsoft Fixes Critical Vulnerability in Azure AI Foundry
PremiumCVE-2026-85889 allowed unauthenticated privilege escalation in Azure AI Foundry; Microsoft released an urgent patch.
Friday, September 18
SilkParasite's Long-Standing Espionage Operation Unveiled in Central Asia
PremiumSilkParasite espionage infrastructure traced across Central Asia, using spear-phishing and trusted Windows programs to deploy RATs.
FBI Disrupts NightmareStresser DDoS-for-Hire Service
PremiumUS authorities seized NightmareStresser domains, disrupting a major DDoS-for-hire service and related attack infrastructure.
Google Chrome 153 Update Patches Critical Security Vulnerabilities
PremiumGoogle released Chrome 153 fixing 42 vulnerabilities including three critical bugs; update browsers to reduce exposure.
Monday, September 14
GuardBreaker Technique Exploits AI Vulnerabilities in Malware Analysis
PremiumObservers detected GuardBreaker prompt-injection technique used to conceal dangerous prompts inside benign comments to fool AI scanners.
Adapting Cybersecurity for Machine-Speed AI Threats
PremiumArticle warns defenders that AI-accelerated attacks operate at machine speed, requiring automated detection and response in AI infrastructure.
Securing the Cloud: Lessons from the Oracle PeopleSoft Zero-Day Exploit
PremiumReport examines Oracle PeopleSoft zero-day exploited by ShinyHunters and recommends resilience for cloud and SaaS supply-chain attacks.
OpenAI Agents Exploit RubyGems for Remote Code Execution and Data Harvesting
PremiumAutonomous OpenAI agents flooded RubyGems with ~2,000 packages, abusing RubyDoc.info to achieve RCE and harvest API keys.
Dell Urges Immediate Updates to Patch Critical ObjectScale Vulnerabilities
PremiumDell ObjectScale/ECS advisory DSA-2026-393 lists critical flaws including CVE-2026-70416 allowing unauthenticated RCE.
Critical Plesk Vulnerability Allows Unauthorized Root Access on Linux Servers
PremiumPlesk Backup Manager CVE-2026-68488 symlink race allows low-privileged users to escalate to root on affected Linux servers.
Revolut Incident Exposes Security Flaws in KYC Protocols
PremiumRevolut misdirected KYC request led to exposure of passport scans and full transaction histories for a subset of customers.
AI in Cyberattacks: Anthropic's Report on Claude's Exploitation
PremiumAnthropic disclosed multiple campaigns where Claude agents automated exploitation, zero-day development, and data theft.
Critical GitLab Vulnerability Exploited: Immediate Action Required
PremiumCritical GitLab path traversal (CVE-2026-85706) is under active exploitation, enabling arbitrary file reads on self-hosted servers.
Friday, September 11
Critical Vulnerabilities in Cisco Firewalls Exploited for Malicious Attacks
PremiumCisco Talos confirms exploitation of Secure FMC flaws enabling root access, malware deployment and staged intrusions by multiple actors.
Phishing Campaign Exploits Passkey Themes to Breach Microsoft 365 Accounts
PremiumAttackers use passkey-themed social engineering to hijack Microsoft 365 accounts, bypassing MFA and exfiltrating cloud data.
Exposing the Hidden Risks of AI Workflow Identity Hijacking
PremiumResearchers describe workflow identity hijacking where AI automation's privileged identities are abused to exfiltrate sensitive data.
Get these articles delivered to your inbox.
Subscribe free