North Korea-Linked macOS Malware Uses Prompt Injection to Evade AI Analysis

SentinelOne says macOS.Gaslight uses prompt injection to mislead AI-based malware analysis, steal data, and use Telegram for ...

Prompts Are The New Malware As Enterprise AI Defenses Fall Behind

CrowdStrike data and OpenAI's admission confirm prompt injection as a dominant enterprise AI attack vector. 65% of ...

Prompt injection is exploiting enterprise AI's biggest design flaws by targeting agents, RAG pipelines and model routers

Prompt injection remains the most effective way to compromise enterprise AI systems because it exploits the fundamental way ...

7,000 Langflow servers are under attack. LangGraph and LangChain have the same holes

Attackers are actively exploiting path traversal and SQL injection in Langflow, LangGraph, and LangChain — below where your ...
Redmond Magazine

Banks Targeted by Fileless Phantom Stealer Phishing Campaign

Phantom Stealer phishing targets banks with fileless malware and in-memory Windows process injection. The infostealer harvests credentials, cookies, financial data, screenshots, and cryptocurrency ...
theregister

Microsoft Build: Surface RTX Spark Dev Box, Coreutils for Windows, air-gapped GitHub and more

Microsoft’s Build event is under way in San Francisco, USA, with the expected focus on agentic AI but also a few surprises, such as Unix-style Coreutils for Windows. CEO Satya Nadella presented ...
Security Boulevard

CVE-2026-9082: Critical Drupal SQL Injection Vulnerability Affects PostgreSQL Deployments

A highly critical SQL injection vulnerability in Drupal core has raised concerns across organizations running PostgreSQL-backed Drupal environments. Tracked as CVE-2026-9082, the vulnerability affects ...
techtimes

Ghost CMS SQL Injection Hits 700 Sites: Harvard, DuckDuckGo Serve Fake Cloudflare Malware

An unpatched SQL injection vulnerability in the Ghost content management system has been weaponized in an active, large-scale cyberattack that has compromised more than 700 websites worldwide — ...
Bleeping Computer

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...
LinkedIn

The State of Prompt Injection Detection: What CISOs Need to Know in 2026

Why the OWASP #1 LLM vulnerability is also the hardest one to defend against — and what the current toolchain actually buys you. If you work in enterprise AI security, you already know the headline.
Computerworld

Microsoft’s Patch Tuesday release for April is a whopper

Nearly every major product family needs immediate patching, from Windows to Office to Microsoft Edge, SQL Server, and even Microsoft Developer Tools. Windows admins are going to be busy this month, ...
Hosted on MSN

Microsoft and SAP issue major security updates as IPv6 shift accelerates

Microsoft’s April 2026 Patch Tuesday delivered fixes for 163 vulnerabilities, including two zero-days, alongside Windows 11 feature updates. SAP patched a critical ABAP SQL injection flaw ...