Unseeable prompt injections in screenshots: more vulnerabilities in #Comet and other #AI browsers
Brave
Unseeable prompt injections in screenshots: more vulnerabilities in Comet and other AI browsers | Brave
AI browsers remain vulnerable to prompt injection attacks via screenshots and hidden content, allowing attackers to exploit users' authenticated se...
 #cybersecurity #LLM #PromptInjection #AIBrowser
#Apple alerts exploit developer that his #iPhone was targeted with government #spyware
TechCrunch
Exclusive: Apple alerts exploit developer that his iPhone was targeted with government spyware
A developer at Trenchant, a leading Western spyware and zero-day maker, was suspected of leaking company tools and was fired. Weeks later, Apple no...
 #cybersecurity
Russian hackers evolve #malware pushed in "I am not a robot" #captchas
BleepingComputer
Russian hackers evolve malware pushed in "I am not a robot" captchas
The Russian state-backed Star Blizzard hacker group has ramped up operations with new, constantly evolving malware families (NoRobot, MaybeRobot) d...
 #Russia #cybersecurity
#Scouts will now be able to earn badges in #AI and #cybersecurity https://www.cnn.com/2025/10/14/tech/scouting-america-ai-cybersecurity-merit-badges #ScoutingAmerica #BoyScouts
Foreign hackers breached a US #nuclear weapons plant via #SharePoint flaws
Foreign hackers breached a US nuclear weapons plant via SharePoint flaws | CSO Online
 #cybersecurity #defense
#NSO permanently barred from targeting #WhatsApp users with #Pegasus #spyware
Ars Technica
NSO permanently barred from targeting WhatsApp users with Pegasus spyware
Ruling holds that defeating end-to-end encryption in WhatsApp harms Meta's business.
 #cybersecurity #privacy
#Claude Code gets a web version—but it’s the new sandboxing that really matters
Ars Technica
Claude Code gets a web version—but it’s the new sandboxing that really matters
Sandboxing lessens hassle, but fire-and-forget agentic tools still pose risks.
 #AI #cybersecurity
#DNS0EU private #DNS service shuts down over sustainability issues
BleepingComputer
DNS0.EU private DNS service shuts down over sustainability issues
The DNS0.EU non-profit public DNS service focused on European users announced its immediate shut down due to time and resource constraints.
 #privacy #EU #Europe
#Retail giant #Muji halts online sales after #ransomware attack on supplier
BleepingComputer
Retail giant Muji halts online sales after ransomware attack on supplier
Japanese retail company Muji has taken offline its store due to a logistics outage caused by a ransomware attack at its delivery partner, Askul.
 #Japan #cybersecurity
#China accuses #US of #cyberattack on national #time center
AP News
China accuses US of cyberattack on national time center
China has accused the U.S. National Security Agency of cyberattacks on its national time center. The Ministry of State Security claims the U.S. age...
 #cybersecurity #politics