Security News

Live news from trusted publications, matched against DayBreach CVE data.

All sourcesArs Technica · 66BleepingComputer · 174CERT Polska · 78Cisco Talos · 47CrowdStrike · 33Dark Reading · 72DataBreaches.net · 35Krebs on Security · 13Microsoft Security Blog · 38Proofpoint · 37Rapid7 · 68SANS Internet Storm Center · 55Security.NL · 315SecurityWeek · 75SentinelOne · 33The Cyber Express · 70TheCyberThrone · 57The Hacker News · 301The Record · 47Unit 42 · 46
The Hacker News2 mo ago

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

A new class of prompt injection is spreading across commercial websites. It requires no malware, no stolen credentials, and no zero-day exploit. It abuses a standard feature built into almost every major AI assistant: pre-filled deep links. We observed production websites embedding hidden prompt injection payloads inside "Ask AI" buttons on marketing and competitor comparison pages. When a user

İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News2 mo ago

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Attackers broke into an organization's Oracle database through a SQL injection flaw in a public-facing web application, then installed a post-exploitation toolkit without writing an executable to disk. They fed Java source code to the database, let Oracle compile it into stored schema objects, and ran commands from inside the database engine. Huntress, which tracks the toolkit as khunt,

Related Companies
O
oracle logo
oracle
M
microsoft logo
microsoft
O
octobercms logo
octobercms
İlgili CVE'ler

No verified CVE link was found for this news item.

Read at the source
The Hacker News2 mo ago

AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model

Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an agent's tools with no check that a model turn had authorized them. In several of the attack paths, the model never ran at all, so system prompts, content filters, and model-level guardrails never got a chance to intervene. The affected products include Amazon

Related Companies
A
AWS logo
AWS
M
microsoft logo
microsoft
V
vercel logo
vercel
G
google logo
google
V
vmware logo
vmware
W
watchguard logo
watchguard
K
kerberos-io logo
kerberos-io
İlgili CVE'ler
CVE-2026-18830 CVE-2026-18236 CVE-2026-64651 CVE-2026-64650 CVE-2026-50522
Read at the source

1091-1100 / 1488 news items shown