Archive
2,593–2,604 of 3,915 items
Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
The ‘SalesBleed’ set of weaknesses in Salesforce’s Agentforce agents exposed CRM data to attackers via prompt injection and DNS exfiltration
Sep 25, 2026 · StaffOriginally on Wedgetail
CISA Unveils Election Security Plan Ahead of 2026 Midterms
The CISA plan provides guidance and resources for election officials to secure systems such as voter registration databases and voting machines
Sep 25, 2026 · StaffOriginally on Wedgetail
On Anthropic’s AI Misuse Report
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized the report ...
Sep 25, 2026 · StaffOriginally on Wedgetail
RemControl Banking Trojan Gives Attackers Remote Control of Android Devices
The newly-discovered trojan abuses the Android Accessibility Service to gain control over victim devices and collect sensitive banking credentials
Sep 25, 2026 · StaffOriginally on Wedgetail
Researchers Identify AliExpress Phishing Domains Before Registration
EfficientIP says it flagged AliExpress phishing domains before they were registered
Sep 25, 2026 · StaffOriginally on Wedgetail
Russia's Hybrid Cyber-Physical War in Europe Heats Up
A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide material suppo...
Sep 25, 2026 · StaffOriginally on Wedgetail
Hostile acts without intent: AI and the Medicare breach
A hack of Australia’s government systems should have us all asking, “who’s in control of agentic AI?”
Sep 25, 2026 · StaffOriginally on Wedgetail
Russia looking to escalate hybrid war, Denmark warns
Denmark’s intelligence service warned that there is a “low but growing risk” of direct attack by Moscow.
Sep 24, 2026 · StaffOriginally on Wedgetail
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
Sep 24, 2026 · StaffOriginally on Wedgetail
SectopRAT Returns, Hiding Inside a Legitimate Application
The latest activity from the remote access Trojan (RAT) shows why organizations should monitor the behavior of applications rather than blindly trusti...
Sep 24, 2026 · StaffOriginally on Wedgetail
Republican presses White House for more AI oversight
Sen. Todd Young, R-Ind., warned that AI-enabled attacks could potentially target hospitals, electric grids, and other infrastructure.
Sep 24, 2026 · StaffOriginally on Wedgetail
Trust and the enticing consultancy offer
In this week’s newsletter Martin muses over a very suspicious elicitation over social media and the true value of trust within the cyber ecosystem. Hu...
Sep 24, 2026 · StaffOriginally on Wedgetail