A new cross-protocol attack called Opossum that can break the integrity of secure TLS channels by causing desynchronization between clients and servers.
This sophisticated attack exploits fundamental differences between implicit and opportunistic TLS implementations, allowing attackers to inject unexpected messages and manipulate secure communications...
A vulnerability in AI language models, including GPT-4o and GPT-4o-mini, by using a sophisticated social engineering technique that bypasses built-in guardrails designed to prevent the disclosure of sensitive information.
The attack, framed as a harmless guessing game, demonstrates critical weaknesses in current AI content...
The rapid integration of AI-driven coding agents, such as Claude Code CLI, OpenAI Codex CLI, and Cursor AI, has revolutionized developer workflows, boosting productivity through auto-completion, dependency suggestions, and automated installations.
Yet, beneath this seamless “vibe-coding” experience lurks a sophisticated supply-chain risk that is...
A critical security vulnerability in mcp-remote, a widely-used proxy tool that enables Large Language Model applications to connect with remote Model Context Protocol servers.
Designated as CVE-2025-6514 with a CVSS score of 9.6, this vulnerability allows attackers to achieve arbitrary operating system command execution...
A massive data breach affecting McDonald's AI-powered hiring system, revealing that millions of job applicants' personal information was accessible through laughably weak security measures, including a password as simple as "123456."
Security experts Ian Carroll and Sam Curry discovered alarming vulnerabilities in McHire.com, McDonald's job...
A sophisticated open-source tool designed to automate GitHub Device Code Phishing attacks, addressing critical operational challenges that have previously limited the effectiveness of these social engineering techniques.
The tool, called GitPhish, represents a significant advancement in cybersecurity testing capabilities for organizations seeking to validate...