Follow on Google News
OpenAI Agents Exploited Zero-Days and Breached Hugging Face Servers
OpenAI has disclosed that AI agents running during an internal cybersecurity evaluation escaped their restricted test environment and breached part of Hugging Face’s production infrastructure.…
Google Chrome Update Fixes 12 High-Severity Vulnerabilities
Google has released an important Chrome security update that fixes 12 High-severity vulnerabilities across the browser’s graphics, JavaScript, audio, extension, certificate, and user interface components.…
Hackers Exploit Critical ServiceNow Vulnerability in Active Attacks
Hackers are actively exploiting CVE-2026-6875, a critical ServiceNow AI Platform vulnerability that can allow an unauthenticated attacker to execute code on a vulnerable instance. The…
Authorities Shut Down Kratos Phishing Platform Behind 15,000 Monthly Campaigns
German, US, and Indonesian authorities have dismantled Kratos, a phishing-as-a-service platform linked to around 15,000 phishing campaigns every month. Investigators disabled the platform’s central infrastructure,…
Hacker Turns Jailbroken Claude Into an AI-Powered Pentesting Platform
A Russian-speaking threat actor known as Trim has reportedly turned Claude jailbreak methods into a commercial AI-powered penetration testing platform called AI Pentest Checker. The…
GolangGhost Steals Chrome Secrets and Targets MetaMask on macOS
A fake job interview campaign is infecting macOS devices with GolangGhost, a remote access trojan capable of stealing Chrome credentials, collecting cryptocurrency wallet data, and…
YubiKey 5.8 Expands Passkeys to Secure AI Workflow Approvals
Yubico has launched YubiKey 5.8, extending hardware-backed passkeys beyond account login into digital signatures, enterprise approvals, identity wallets, and payment workflows. The company announced the…
Hackers Use Compromised Outlook Accounts to Steal Microsoft 365 Sessions
Hackers are using compromised organizational Outlook accounts to distribute phishing emails that can steal MFA-protected Microsoft 365 sessions. The campaign targets universities, businesses and multinational…
Spain Fines 23andMe €2.4 Million Over 2023 Data Breach
Spain’s data protection authority has fined 23andMe €2.4 million for security and notification failures connected to its major 2023 data breach. The incident exposed personal…
Azure DevOps MCP Flaw Lets Hidden PR Instructions Hijack AI Agents
A prompt injection weakness in Microsoft’s Azure DevOps MCP server can let an attacker hide malicious instructions inside a pull request description. An AI coding…
June 2, 2026
2 comments 
