Wiz: Autonomous AI Agent Breaches Airline Booking Database in 15 Minutes
A fully autonomous AI agent exploited a major airline's BOLA flaw, exposing sensitive passenger data rapidly. The incident highlights ongoing vulnerabilities in API security and automation's dual-use implications.
Adobe Patches 11 ColdFusion, Campaign Classic Flaws: Four Hit Max Severity
Adobe has patched 11 vulnerabilities in ColdFusion and Campaign Classic, including six critical flaws in ColdFusion that allow remote code execution. No active exploitation is reported. Users should update affected versions promptly.
AI’s AppSec Catch-22: Faster Code, More Risk and a Shrinking Audit Trail
VIDEO: AI is speeding up software development, challenging security teams to balance rapid release with vulnerability management, leading to risks of deploying known vulnerabilities without adequate oversight.
AI Code Is Moving Faster Than AppSec’s Audit Trail
Checkmarx research points to a deeper software security problem: AI is accelerating development while companies struggle to prove what shipped, what touched the code and who accepted the risk.
Your Doorbell Is Somebody Else’s Cybercrime Tool: Here’s How
A new report reveals that American home internet connections are exploited for cybercrime and espionage, highlighting the lack of regulatory authority among federal agencies to address this growing issue.
Klue Supply Chain Attack: How a 2022 Credential Exposed LastPass and Ten Other Firms
The Klue supply chain attack exposed a structural blind spot that most security teams still haven't fixed: the forgotten OAuth connection sitting quietly in the corner of their Salesforce instance.
Google Workspace Has a Zombie OAuth Token Problem
A report reveals OAuth-connected Google Workspace apps retained access despite inactivity, posing security risks amid rapid AI tool adoption.
World Cup-Themed Scams Fuel Fake Samsung, Nike and Adidas Shops Across Europe
Bitdefender Labs says more than 55 fake-shop campaigns hit consumers in 12 European countries, blending Facebook ads, WhatsApp, fake checkout pages and FIFA merchandise lures into a broader fraud funnel.
Smart TV Apps on LG and Samsung Are Running Residential Proxy Software
A scan of more than 6,000 LG and Samsung apps found roughly one-third contain SDK code that routes outside internet traffic through the viewer's home connection—without meaningful consumer awareness.
U.S. Digital ID Readiness Report
Digital IDs promise faster travel, safer onboarding and less oversharing.