Security Articles

ChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface

Recent research reveals critical vulnerabilities in AI systems.

Google Cloud

012 min read

Cloud CISO Perspectives: How to build an AI-ready security program for the public sector

This guide helps government CISOs build AI-augmented security programs to protect critical infrastructure and agencies.

Cloud CISO

AI & Machine Learning

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit

Attackers exploited CVE-2026-39987 in Marimo and used an LLM agent to conduct post-exploitation activities including credential extraction, AWS access, and database exfiltration.

New Russian-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks

GREYVIBE is a Russian-linked threat actor targeting Ukraine since August 2025, using AI-powered tools and multiple attack vectors.

What 2,000 Exposed Vibe-Coded Apps Reveal About the Limits of Most Security Stacks

This article examines Shadow Builders—employees building and deploying AI-powered applications to production systems without security oversight—revealing critical gaps in modern security practices.

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

Malicious NuGet and npm packages target banking credentials and cloud secrets in active supply chain attacks.

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

This article analyzes Kimsuky's sophisticated cyber attacks against South Korean military and corporate entities, focusing on their deployment of HTTPSpy malware and new tools like HelloDoor and VS Code tunneling.

Vercel

06 min read

Protecting against inference theft

This article covers inference theft, where attackers steal paid AI API calls.

Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code

A critical Gogs vulnerability (CVSS 9.4) allows authenticated users to execute arbitrary code by injecting the --exec flag into git rebase operations.

HashiCorp

05 min read

SCIM in HashiCorp Vault standardizes provisioning in platforms

SCIM support in HashiCorp Vault (beta) standardizes identity provisioning by mapping SCIM users to Vault entities and groups to internal identity groups.

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

Threat actors exploit CVE-2026-35616, a critical FortiClient EMS vulnerability, to deploy credential-stealing malware disguised as endpoint updates.