Author Archives: mzeeshanzafar28@gmail.com

Ivanti Under Siege: Why Your VPN Might Be a Hacker’s Open Door The cybersecurity world is still reeling from the active exploitation of multiple critical vulnerabilities in Ivanti Connect Secure and Policy Secure gateways. These flaws have allowed state-sponsored threat … Read More

AI So Powerful It Can Hack Everything – And Its Makers Won’t Release It Anthropic just unveiled Claude Methos, a beast of an AI model that sniffs out vulnerabilities in every major OS and browser with simple prompts.[2][6] They’re not … Read More

Critical Marimo Flaw Exploited Just Hours After Disclosure – Hackers Are Lightning Fast Now Security researchers disclosed a critical unauthenticated vulnerability in Marimo, a popular open-source Python notebook tool for data science and AI apps, only for hackers to weaponize … Read More

CPUID Hacked: Hackers Poison CPU-Z and HWMonitor Downloads, Delivering Malware Straight to Devs’ Desktops Hackers breached CPUID’s API, hijacking download links for popular tools CPU-Z and HWMonitor to serve malware-laden executables instead of legit software.[3] This supply chain hit targets … Read More

Russian Hackers Are Vacuuming Microsoft Office Tokens from 18,000+ Routers—No Malware Needed Russian military intelligence hackers, tracked as Forest Blizzard, are exploiting ancient router flaws to silently steal Microsoft Office authentication tokens from users across thousands of networks.[1] Black Lotus … Read More

Flowise RCE Nightmare: Hackers Are Already Pwn’ing Your AI Apps Hackers are hammering a max-severity RCE bug in Flowise, the open-source platform for whipping up custom LLM apps and agentic AI systems, letting them run arbitrary code on victims’ servers.[1] … Read More

Hackers Are Actively Exploiting a Max-Severity RCE in Flowise – Your LLM Apps Are Sitting Ducks Attackers are hammering a critical remote code execution vulnerability in Flowise, the open-source platform for building custom LLM apps and AI agents, tracked as … Read More

AI Coding Assistant Cline Hacked via GitHub Prompt Injection – Thousands of Systems Compromised! A supply chain attack hit the AI coding assistant Cline through a sneaky prompt injection in its GitHub workflow, installing rogue OpenClaw instances with full system … Read More