Check Point uncovered a ChatGPT Lockdown Mode bypass in HTML previews, enabling zero-click data exfiltration and phishing before OpenAI deployed a patch.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances

The post ChatGPT Lockdown Mode Bypass Exposes Chat Data appeared first on Daily CyberSecurity.

OpenAI GPT-6 Cyber advances cybersecurity research by finding software flaws and strictly obeying mission boundaries.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Vercel DBSC Session Security Thwarts Cookie Theft
• Apple Begins iCloud Public Link Scanning in iOS 27.3

The post OpenAI GPT-6 Cyber: New Era in Security Research appeared first on Daily CyberSecurity.

An upcoming OpenAI cyber model found 1,724 Linux kernel vulnerabilities and built 948 local root exploits to help maintainers patch critical bugs.

Related Posts:

• Linux 7.4 Merge Window Sets Record with AI Patches
• OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata
• GNOME OS Preview Brings GNOME 51.1 to the Public

The post OpenAI Cyber Model Uncovers 1,724 Linux Kernel Vulnerabilities and Builds 948 Root Exploits appeared first on Daily CyberSecurity.

Attackers exploit the GPUStack authentication bypass CVE-2026-102895 in the wild. Update to 2.2.2 now to fix this flaw and CVE-2026-102894.

Related Posts:

• Cisco Patches High-Severity Remote Code Execution in UCS Central Alongside ISE and Unified CM Flaws
• Control Web Panel Patches Ten Flaws Allowing Unauthenticated Root Code Execution
• Debian and Ubuntu Patch Critical APT Package Manager Flaw Allowing Root Code Execution

The post Attackers Exploit Critical GPUStack Authentication Bypass in the Wild to Run Reverse Shells appeared first on Daily CyberSecurity.

Mandiant warns that enterprise LLMJacking cloud attacks drain API quotas. Attackers use LLMJacking cloud attacks to resell access via illicit mixer portals.

Related Posts:

• Kimsuky Operation GitPower Staging Infrastructure Stays Live on GitHub
• Binance Hack Report Details Fake Job Interview, AI Tool Abuse and EIP-7702 Wallet Drain
• Kaspersky Uncovers CyberStrikeAI Framework Attacks on Schools

The post Threat Actors Hijack Enterprise AI Models in Costly LLMJacking Cloud Attacks appeared first on Daily CyberSecurity.

Pluto Research exposes Hugging Face malware. This Hugging Face malware campaign drops cryptominers and backdoors on self-hosted AI servers.

Related Posts:

• PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation
• Google Disrupts Videostrong XCPE Botnet on Android TV
• NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks

The post Hugging Face Malware Campaign Infects AI GPU Servers appeared first on Daily CyberSecurity.

A critical LiteLLM vulnerability (CVSS 10.0) lets an unauthenticated file read leak the master key on Enterprise proxies. Update to 1.106.5 now.

Related Posts:

• Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline
• Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public
• Adobe Patches Nine Critical Vulnerabilities in Campaign Classic and Connect

The post Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0 appeared first on Daily CyberSecurity.

NVIDIA security update fixes NeMo Agent Toolkit vulnerability CVE-2026-65145 (CVSS 10.0) plus TensorRT-LLM and PhysX flaws. Update to 1.9.0 now.

Related Posts:

• Intelbras Camera Vulnerability Lets Attackers Knock Mibo Cameras Offline
• Body-Parser Flaw CVE-2026-111181 Lets One Request Crash Express Servers, PoC Public
• Unauthenticated File Read Leaks Master Key in LiteLLM Enterprise Proxy, CVSS 10.0

The post NVIDIA NeMo Agent Toolkit Vulnerability CVE-2026-65145 Scores CVSS 10.0 appeared first on Daily CyberSecurity.

A Skynet LLMjacking agent hijacks exposed AI models to scan, hack servers and mine crypto for 100,000 steps, while victims pay the bill.

Related Posts:

• INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors
• BRONZE SANDCASTLE Uses Sandboxie DLL Sideloading to Deploy Modified Meterpreter Backdoor
• SafePay Ransomware Hits 600 Victims as FBI, CISA and Allies Issue Joint Warning

The post Skynet LLMjacking Agent Hijacks Exposed AI Models to Hack Servers and Mine Crypto appeared first on Daily CyberSecurity.

Fortinet security updates for FortiOS, FortiManager and FortiAnalyzer fix critical AI-found flaws. Advisories follow November 10. Patch now.

Related Posts:

• cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
• QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
• Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts

The post Fortinet Urges Fast Upgrades as AI-Found Flaws Hit FortiOS, FortiManager and FortiAnalyzer appeared first on Daily CyberSecurity.

Symantec reveals the Aoki infostealer. The Aokigahara Aoki infostealer steals API keys and session files from Claude, Codex, Cursor, and Gemini.

Related Posts:

• 333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks
• CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers
• Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access

The post Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants appeared first on Daily CyberSecurity.

Unit 42 reveals the CL-UNK-1211 SysGoRAT malware campaign, where attackers use AI scripts and SysGoRAT malware to breach government Linux servers.

Related Posts:

• 333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks
• Aoki Infostealer Harvests API Keys and Tokens From AI Coding Assistants
• Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access

The post CL-UNK-1211 Deploys SysGoRAT Malware and AI Scripts Against Government Linux Servers appeared first on Daily CyberSecurity.

The OpenCode security breach may have exposed stored third-party API keys for 1.4% of Console users. Revoke and rotate keys now.

Related Posts:

• Sourcenext Data Breach Exposes 22.5M User Records
• UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites
• Ricardo Data Leak Exposes User Contact Details

The post OpenCode Security Breach Exposes 1.4% of Console Users appeared first on Daily CyberSecurity.

Apple bans nudify apps and nonconsensual deepfakes under strict new App Store guidelines requiring developers to proactively block illicit content.

Related Posts:

• TP-Link Moves Router Assembly to the United States
• Google DMA Compliance Under EU Review After Fine
• ChatGPT Chrome Extension Now Reads Your Open Tabs

The post Apple Bans Nudify Apps in Strict App Store Overhaul appeared first on Daily CyberSecurity.

IBM fixes 25 Langflow vulnerabilities, including critical RCE flaw CVE-2026-104334 (CVSS 9.8). Upgrade to Langflow 1.12.3 now.

Related Posts:

• Murrelektronik Will Not Fix Critical AAS Edge Client Flaw CVE-2026-94293, Urges Removal
• Researchers Publish Full Details and PoC Exploit for a WordPress libheif RCE Chain
• PoC Exploit and Technical Details Released for LibreOffice Calc Code Execution Flaw CVE-2026-63277

The post IBM Patches 25 Langflow Vulnerabilities, Including Two Critical Remote Code Execution Flaws appeared first on Daily CyberSecurity.

GitLab AI Gateway vulnerability CVE-2026-90970 (CVSS 9.9) lets Duo Agent Platform users run commands. Upgrade self-hosted gateways now.

Related Posts:

• Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline
• Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic Server
• Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

The post GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands appeared first on Daily CyberSecurity.