A Chinese artificial intelligence company claims to have created a “cyber nuclear weapon” that could carry out devastating attacks on Western companies and governments. Beijing-based Zhipu AI (Z.ai) said its AI model now matches Anthropic’s Mythos model at finding cyber security vulnerabilities, putting China on par with the US. When Mythos was unveiled in April,…
A critical vulnerability in Google Messages for Wear OS has exposed millions of smartwatch users to a silent SMS hijacking attack. CVE-2025-12080, discovered by security researcher Gabriele Digregorio in March 2025 and awarded a bounty by Google’s Mobile Vulnerability Reward Program, allows any installed application to send text messages on behalf of the user without…
A recent investigation by Varonis Threat Labs uncovered a critical loophole that allowed attackers to create malicious Azure applications using reserved Microsoft names. By bypassing safeguards, hackers could register deceptive app names like “Azure Portal,” tricking users into granting dangerous permissions. This flaw enabled cybercriminals to gain initial access, maintain persistence, and escalate privileges within…