Latest headlines from security outlets
Collected every two hours from specialised publications — each link leads to the original article.
Vertex AI Vulnerability Exposes Google Cloud Data and Private Artifacts
Cybersecurity researchers have disclosed a security "blind spot" in Google Cloud's Vertex AI platform that could allow artificial intelligence (AI) agents to b…
OpenAI Patches ChatGPT Data Exfiltration Flaw and Codex GitHub Token Vulnerability
A previously unknown vulnerability in OpenAI ChatGPT allowed sensitive conversation data to be exfiltrated without user knowledge or consent, according to new …
Google Gemini Prompt Injection Flaw Exposed Private Calendar Data via Malicious Invites
Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authori…
Mageia 9: Critical Rand Function Vulnerability in perl-Data-Entropy
MGASA-2025-0279 - Updated perl-Data-Entropy packages fix security vulnerability
Fedora 43: luksmeta Critical Data Corruption Fix CVE-2025-11568
Fix handling of large metadata Fix: CVE-2025-11568
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & More
It’s easy to think your defenses are solid — until you realize attackers have been inside them the whole time. The latest incidents show that long-term, silent…
Fedora 41: WordPress 6.8.3 Critical Data Leak & XSS Vulnerability Alert
WordPress 6.8.3 Release Security updates included in this release: A data exposure issue where authenticated users could access some restricted content. Indepe…
Core Linux System Component "Udisks" Opens the Door to Unauthorized Access, Data Leaks
It's always unnerving when a system service you rely on day-to-day turns out to be a potential gateway for unauthorized access. That's the story with CVE-2025-…
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud Attacks
The financially motivated threat actor known as Storm-0501 has been observed refining its tactics to conduct data exfiltration and extortion attacks targeting …
LangSmith Bug Could Expose OpenAI Keys and User Data via Malicious Agents
Cybersecurity researchers have disclosed a now-patched security flaw in LangChain's LangSmith platform that could be exploited to capture sensitive data, inclu…
Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction
A novel attack technique named EchoLeak has been characterized as a "zero-click" artificial intelligence (AI) vulnerability that allows bad actors to exfiltrat…
Debian: DLA-4208-1 Critical: MariaDB 10.5 DoS and Data Access Issues
Vulnerabilities was discovered in MariaDB, a SQL database server compatible with MySQL. CVE-2025-30693
Data Security Best Practices for Strengthening Linux Networks
When it comes to managing Linux systems, there's one thing every admin knows: security is a constant battle. Sure, you've set up the basics''firewalls, permiss…
Ransomware Gangs Use Skitnet Malware for Stealthy Data Theft and Remote Access
Several ransomware actors are using a malware called Skitnet as part of their post-exploitation efforts to steal sensitive data and establish remote control ov…
Mageia 9: 2025-0147 critical: mod_auth_openidc data leak
mod_auth_openidc allows OIDCProviderAuthRequestMethod POSTs to leak protected data. (CVE-2025-31492) References: - https://bugs.mageia.org/show_bug.cgi?id=34216
A Tiny Linux Kernel Tweak with Massive Implications for Datacenter Efficiency
In a groundbreaking development, security researchers have introduced a small but mighty tweak to the Linux kernel that promises to cut data center power consu…
New PIXHELL Attack Exploits Screen Noise to Exfiltrates Data from Air-Gapped Computers
A new side-channel attack dubbed PIXHELL could be abused to target air-gapped computers by breaching the "audio gap" and exfiltrating sensitive information by …
New PIXHELL Attack Exploits LCD Screen Noise to Exfiltrate Data from Air-Gapped Computers
A new side-channel attack dubbed PIXHELL could be abused to target air-gapped computers by breaching the "audio gap" and exfiltrating sensitive information by …
Microsoft Patched Copilot Vulnerabilities That Could Expose Data
A security researcher discovered numerous vulnerabilities in Microsoft Copilot that could expose users’ personal information,…Microsoft Patched Copilot Vulnera…
Microsoft Copilot Studio Vulnerability Could Expose Sensitive Data
Microsoft’s AI flagship, Copilot Studio, potentially threatened the firm’s internal infrastructure. Specifically, a critical SSRF…Microsoft Copilot Studio Vuln…
Slack AI Vulnerability Exposed Data From Private Channels
Researchers discovered a serious vulnerability in the popular communication tool’s special service, Slack AI. An…Slack AI Vulnerability Exposed Data From Priva…
SAP AI Core Vulnerabilities Expose Customer Data to Cyber Attacks
Cybersecurity researchers have uncovered security shortcomings in SAP AI Core cloud-based platform for creating and deploying predictive artificial intelligenc…
Quit Using EmailGPT as Vulnerability Risks Users Data
Researchers warn users to stop using the EmailGPT service due to an unpatched security vulnerability.…Quit Using EmailGPT as Vulnerability Risks Users Data on …
Replicate AI Vulnerability Could Expose Sensitive Data
Researchers found a serious security vulnerability in the Replicate AI platform that risked AI models.…Replicate AI Vulnerability Could Expose Sensitive Data o…