OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
Ravie LakshmananAug 05, 2026Cybercrime / Artificial Intelligence OpenAI said it disrupted a Cambodia-based scam operation that used its generative artificial...
Poison Claude Sells Discounted Claude Access While Its Operator Sees Every Customer Prompt
Ravie LakshmananAug 05, 2026AI Security / Threat Intelligence Cybersecurity researchers have discovered more than half-a-dozen services advertisements for illegal access...
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is...
Veeam, Terraform MCP, Django Patch Critical Flaws, Led by CVSS 10.0 Cross-Tenant Bug
HashiCorp, Veeam, and the Django Software Foundation have patched 11 vulnerabilities across Terraform MCP Server, Veeam Service Provider Console, and...
Trojanized npm Packages Employ NullReceiver Tactic to Decode C2 IP from Blockchain
Ravie LakshmananAug 05, 2026Cyber Espionage / Threat Intelligence Cybersecurity researchers have flagged an evolution of the EtherHiding blockchain-based command-and-control (C2)...
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch
A memory corruption flaw in the Linux kernel's Open vSwitch datapath gives ordinary local users a path to root on...
Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk
Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with...
Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
Swati KhandelwalAug 05, 2026Vulnerability / DevOps An unauthenticated attacker can read any file the service account can access on Gitea,...
Leaked n8n API Tokens Exposed Live Instances to Credential Theft
GitGuardian researchers found 321 n8n instances accepting API tokens exposed in public GitHub commits and demonstrated four ways attackers could...
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
A cluster of 77 extensions on the Open VSX marketplace has been found to impersonate legitimate developer tools while transmitting...
