SilverFox Hackers Built Fake Software Sites That Hide Malware From Security Researchers

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Fake software download pages are drawing Windows users into a Silver Fox-linked malware campaign. The pages imitate familiar vendors and supply installers that can leave an infected computer vulnerable to continued access. Microsoft has observed compromises across several industries, mainly …

OpenAI Scrapped the New GPT-6.1 Astra Model Following Security Concerns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has scrapped the release of GPT-6.1 Astra after internal safety testing exposed troubling failures involving deception, authorization boundaries, and unsafe tool use. The agentic AI model had been scheduled for an October debut in ChatGPT and Codex, where it …

GPT-6 Astra AI Agent Tried to Deceive Developers and Hack Software Supply Chains

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The UK AI Security Institute (AISI) recently disclosed that during cybersecurity evaluations, the GPT-6 Astra model executed simulated, unauthorized supply-chain attacks. This was part of a pre-release assessment conducted using Petri, a simulation platform designed for evaluating AI in cyber …

GitHub AI Security Agent Finds 24 Android Vulnerabilities Including Account Takeover Flaws

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

GitHub Security Lab has disclosed that its open-source AI security agent identified 24 vulnerabilities in Android applications, including flaws that could enable covert location tracking in OsmAnd and account takeover attacks against Wikipedia for Android. The findings highlight how targeted …

Hackers Using ChatGPT’s Custom GPT feature to Trick Victims into Installing Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are abusing ChatGPT’s Custom GPT feature to impersonate AI products and trick users into installing a sophisticated remote access trojan (RAT), according to Huntress researchers. The campaign turns a trusted ChatGPT-hosted page into the opening stage of a ClickFix …

AgtaBackup RAT Uses Fake Microsoft Store Pages and RMM Tools to Hijack Windows Systems

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A newly tracked Windows remote access trojan called AgtaBackup RAT is using fake Microsoft Store pages to gain a foothold on victims’ computers. The campaign pretends to offer popular video-conferencing software, but the download instead installs a legitimate remote monitoring …

Modulate Raises $25M to Fight Deepfake Voices With Next-Generation Audio AI

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Modulate has secured $25 million in funding to expand its audio-native AI platform as enterprises confront deepfake voice fraud, impersonation, and unsafe automated conversations. Future Ventures led the round, joined by Hyperplane and Lakestar, bringing the company’s funding total to …

OpenAI’s AI Agents Went Beyond Their Tasks and Triggered New Security Concerns

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenAI has acknowledged that one of its experimental AI agents gained unauthorized access to an Australian government health statistics portal during internal training in June. The incident has intensified concerns that increasingly capable AI agents may pursue goals in unexpected …

wolfSSL 5.9.4 Fixes 11 TLS Security Flaws and Expands Post-Quantum Cryptography Support

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

wolfSSL has released version 5.9.4, fixing 11 security vulnerabilities in its embedded TLS and cryptography library while adding major post-quantum cryptography capabilities. The update is important for developers using wolfSSL in IoT devices, embedded products, servers, gateways, and applications that …

Storm-3168 Deletes Azure Resources in 7-Minute Destructive Cloud Attack

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Storm-3168 used compromised cloud identities to carry out a destructive attack against an Azure environment in minutes. The operation shows how a stolen application credential can give an intruder broad control over hosted data, services, and recovery protections. It also …