Truesec

Cyber threats certainly didn't take the summer off. What I have seen over the past few months has reinforced something I have been thinking about for a while: we are entering a machine-speed world, while much of cybersecurity is still built for human spee

Researchers have since concluded that this vulnerability, and at least five more from the same source, were in fact false and referred to non-existent problems. They were also all flagged by Gptzero as highly likely being generated by an LLM. 1 Assessment

With the advent of large AI companies selling access to LLM on a Software-as-a-Service model where the customer pays for their token usage, criminals are now instead increasingly beginning to hack organizations and steal credentials or API keys that allow

According to public knowledge the AI Agent used a test model with no security restrictions that had been given a task to solve as a test and decided that the best way to solve it was to use Hugging Face's connection to OpenAI to find the answer to the tes

CVE-2026-586441:This vulnerability is critical a deserialization flaw that allows an attacker authenticated with sufficient privileges to execute arbitrary code remotely on affected SharePoint servers. It impacts SharePoint Server Subscription Edition, Sh

The threat actor targeted unprotected routers and manipulates their DNS settings so that traffic to certain domains gets redirected to an AitM site, where victims are lured to enter their credentials into a fake login page that stores the credentials and

These attacks include attempts to compromise programmable logic controllers (PLC) exposed to the internet and used in water supply systems in the US, as well as deploying a wiper against a US healthcare company and the email server of Albania's parliament

In a recent report, the FBI warns that Silent Ransom Group has also begun recruiting gig workers in the victims' area under the guise of hiring helpdesk personnel. Gig workers are people who earn money through short-term, flexible jobs rather than a tradi

The initial attack vector was the exploitation of a known missing-authentication vulnerability, CVE-2025-3248, in Langflow, an open-source tool for building AI apps and agent workflows. Once inside, the agent moved quickly and cleaned up after itself. It

In this article, we will learn that using PowerShell's CLIXML deserialization could lead to undesired effects, including remote code execution.