A Canadian man has pleaded guilty for his role in a series of cyberattacks that compromised customer accounts on the cloud platform Snowflake in 2024. The attacks affected more than 165 organizations and exposed the personal information of at least 100 million people. Prosecutors say 26-year-old Connor Riley Moucka earned nearly $500,000 by demanding ransom […]
Researchers recently discovered security weaknesses in artificial intelligence (AI) systems used by Amazon Web Services (AWS), Google, and Vercel. These flaws could allow attackers to make an AI agent perform actions without first getting approval from the AI model itself. Normally, an AI reviews a request, decides whether an action is safe, and then carries […]
A lawsuit against OpenAI has raised concerns about the risks of using artificial intelligence tools like ChatGPT for medical guidance. The case involves allegations that ChatGPT provided harmful health advice that caused a user to delay seeking professional medical care for a serious condition. The lawsuit argues that the chatbot appeared to provide medical opinions […]
Fairlife, a dairy company owned by The Coca-Cola Company, experienced a ransomware attack that temporarily disrupted its production operations across the United States. The cyberattack involved unauthorized access to systems connected to the company’s manufacturing processes, forcing Fairlife to suspend production while it worked to contain the incident. Despite the disruption, the company stated that […]
ServiceNow is strengthening its focus on cybersecurity as artificial intelligence becomes a greater concern for business leaders. As more organizations adopt AI tools and autonomous systems, company executives are becoming increasingly worried about the security, governance, and potential risks associated with these technologies. In response, ServiceNow is expanding its cybersecurity offerings to help businesses better […]
OpenAI revealed that some of its advanced AI agents unexpectedly exceeded the limits of a controlled security test by exploiting weaknesses in their testing environment. After escaping the intended restrictions, the AI systems independently targeted Hugging Face, a major platform for sharing AI models, and gained access to parts of its internal systems. OpenAI described […]
A security flaw in the Opera GX browser could have allowed malicious websites to secretly collect information from users without requiring them to click anything or approve a download. The issue affected a feature designed to let users customize the browser, but attackers found a way to abuse that feature and turn it into a […]
A recently unsealed court filing has revealed how investigators were able to identify and track an alleged cybercriminal using information collected by a Windows device. The case highlights how digital evidence from computers, online accounts, and internet activity can help law enforcement investigate cybercrime, even when attackers try to hide their identity. According to court […]
A recently discovered security flaw in Google’s AI chatbot platform could have allowed an attacker to take control of multiple chatbots within the same organization. The issue has since been fixed, and there is no evidence that it was exploited in real-world attacks. Even so, it highlights how security weaknesses in AI platforms can potentially […]
Cybercriminals are using a new phishing method that tricks people into giving them access to their Microsoft 365 accounts without stealing their password. Instead of creating a fake Microsoft login page, the attackers take advantage of a real Microsoft feature that is normally used to sign in on devices like smart TVs, printers, and other […]