Anthropic's Claude AI features a "Claude Pirate" vulnerability, allowing prompt injection to exfiltrate user data via its File API.
The Aisuru botnet now rents 700,000+ IoT devices as residential proxies, aiding AI data scraping and other cybercrimes.
CISA warns of active exploitation of critical flaws in Dassault DELMIA Apriso (CVE-2025-6204, CVE-2025-6205) and XWiki, requiring federal patches by November 18.
Ten malicious npm packages were found stealing developer credentials from Windows, Linux, and macOS via a supply chain attack.
Qilin ransomware now abuses Windows Subsystem for Linux (WSL) to deploy Linux encryptors on Windows, improving evasion.
The "TEE.Fail" side-channel attack extracts secrets from Intel and AMD TEEs on DDR5 systems, posing a hardware security risk.
"Herodotus" Android banking trojan mimics human typing to evade behavioral biometrics, enabling device takeovers in Italy and Brazil.
Everest ransomware claimed a 280 GB data breach from Sweden's Svenska kraftnät power grid, though operations remained stable.
North Korea's BlueNoroff group deployed "GhostCall" and "GhostHire" malware for Web3/blockchain financial attacks.
Russian-backed actors target Ukrainian organizations with stealthy living-off-the-land tactics for data exfiltration.