Tag: security
ChatGPT and other AI tools could be putting users at risk by getting company web addresses wrong
AI isn’t too good at generating URLs – many don’t exist, and some could be phishing sites Attackers are now optimizing sites for LLMs rather than for Google Developers are even inadvertently using dodgy URLs New research has revealed AI often gives incorrect URLs, which could be putting users at…
Read More
The AI-powered future of ransomware is coming soon – here’s what we need to look out for
Kaspersky recently analyzed FunkSec, a new ransomware group This group uses AI to generate code in the encryptors and other tools Ransomware is steadily growing as a threat The future of ransomware threats lies in Generative Artificial Intelligence (GenAI), as hackers are increasingly using the nascent technology to improve and…
Read More
Cisco warns of a serious security flaw in comms platform – and that it needs patching immediately
Login credentials for an account with root access was found in Cisco’s Unified Communications Manager There are no workarounds, just a patch, so users should update now Different versions of the tool are affected Another hardcoded credential for admin access has been discovered in a major software application – this…
Read More
Security experts flag another worrying issue with Anthropic AI systems – here’s what they found
Anthropic’s MCP Inspector project carried a flaw that allowed miscreants to steal sensitive data, drop malware To abuse it, hackers need to chain it with a decades-old browser bug The flaw was fixed in mid-June 2025, but users should still be on their guard The Anthropic Model Context Protocol (MCP)…
Read More
Google has patched another urgent security flaw in Chrome – so update now or be at risk
Google’s TAG team finds high-severity bug in Chrome V8 The bug allows threat actors to run arbitrary code on endpoints It is being actively exploited, so users should patch now Google has fixed a high-severity Chrome vulnerability which was allegedly being exploited in the wild, possibly by nation-state threat actors.…
Read More
Microsoft 365 and Google Workspace could put sensitive data at risk because of a blind spot in default email behavior
Experts warn emails sent with sensitive data are still getting delivered unencrypted, and no one gets notified Microsoft 365 sends email in plain text when encryption fails, without alerting the user at all Google Workspace still uses insecure TLS 1.0 and 1.1 without warning senders or rejecting messages Most users…
Read More