Home

Click here to display content from VideoPress.
Learn more in VideoPress’s privacy policy (opens in a new tab).

Open "VideoPress Video Player" directly
  • Old Bar Beach
  • AI Generated Image – Awakening

CYBER SECURITY NEWS

  • New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data
    Adversa AI has disclosed an attack technique that it says can cause xAI's Grok chatbot to send a user's name, approximate location, subscription tier, and the prompts from the ongoing conversation to an attacker-controlled server after the user asks it to summarize an ordinary web page. The AI security company, which has codenamed the technique […]
  • Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE
    Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape the confines of the isolated environment. The vulnerability ("GHSA-864f-rcv7-6rh4"), which has yet to be assigned a CVE identifier, impacts all versions of the library before […]
  • Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers
    Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology company, the issues affect customer-managed NetScaler ADC and NetScaler Gateway, including certain FIPS and NDcPP builds, as well as SecurAccess
  • Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution
    A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question is CVE-2026-73570 (CVSS score: 8.9), which refers to a case of command injection that can lead to remote code execution. "A remote code execution vulnerability […]
  • Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments
    Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS) terminal reads over near-field communication (NFC), without breaking any of the card's cryptography. The attack, which the researchers named "Zombie Card," requires physical
  • Why "Shady AI" is Security's Next Big Governance Problem
    In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it.  The incident began when a Meta employee posted a technical question on an internal forum. An engineer used an approved AI agent to analyze it, […]
  • CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification
    Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a low-bandwidth request stream by up to 350x against the origin server. The attacks, collectively named "CDN Tsunami," were evaluated against Alibaba, Baidu,

LATEST POSTS