Four Vulnerabilities in Dify AI Platform Allow Cross-Tenant Conversation Exposure Without Authentication
Researchers from Zafran Security have detailed a cluster of flaws, collectively named DifyTap, that could…
Month: June 2026
Gizmodo Account Compromise Delivers ClickFix Malware to Readers
A single compromised account on the veteran tech publication was enough to expose visitors to…
INTERPOL Flags Sharp Rise in Phishing, Ransomware and AI-Enabled Fraud Across Asia-Pacific
A new INTERPOL assessment finds cybercrime escalating rapidly across the region, driven by digitalization gaps,…
CISA Flags Active Exploitation of Critical Splunk Enterprise Vulnerability
US federal agencies have until Sunday to patch a critical Splunk Enterprise flaw that attackers…
Schneider Electric Discloses Session-Management Flaw Across Broad OT Portfolio
A high-severity insufficient-entropy vulnerability in dozens of Schneider Electric protection relays, power automation systems, and…
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
Your office Wi-Fi may already be a proxy node.
Z.ai Releases GLM-5.2: A 753B Open-Weights Model That Tops Independent Benchmarks
A Chinese AI lab has released one of the most capable open-weights language models to…
Google Vertex AI SDK Flaw Allowed Model Upload Hijacking via Bucket Squatting
A vulnerability in the Vertex AI Python SDK let an unprivileged attacker intercept machine learning…
Digital sovereignty is now an operating requirement, not a policy aspiration
A practical framework for CISOs navigating data control, vendor dependency, and continuity obligations in an…
Developer Avoids Backdoor via AI Code Review After Fake Recruiter Approach
A social engineering attack targeting a Python developer through LinkedIn reveals how npm lifecycle hooks…