All of the big LLMs are vulnerable to a new type of prompt injection attack that targets their safety policies, according to security firm HiddenLayer. The attack essentially fully jailbreaks the AI models, exposing the system prompt as well as enabling all different types of dangerous requests.
When it comes to zero-days and spyware, China and North Korea’s hacking teams head up the leaderboard with five 2024 incidents each. Russia had three, and South Korea one; another three were likely the work of APT groups but a specific nation was not pinned down.
The size of the health insurance breach, 4.7 million of about 6 million Blue Shield California customers, is not the only point of concern. The breach window was reportedly open from April 2021 to January 2024, nearly three continuous years. And the loss of health data was also only detected in February of this year.
Of all the cyber attacks examined in the 2025 DBIR, 22% kicked off with credential abuse. Vulnerability exploitation has been making a strong push to take the lead over the last two years, however, with its most recent surge putting it at 20% (and ahead of phishing at 16%).
The 2015 Cybersecurity Information Sharing Act is set to expire this September. The programs the cybersecurity law authorizes not only facilitate information sharing, but also offer legal protections to private partners that might otherwise be hesitant to engage with the government for fear of repercussions.
China made the seeming admission at a secret meeting taking place in Geneva in December. The WSJ source said that the admission of Volt Typhoon cyber attacks was not entirely direct, rather “somewhat ambiguous” in nature but still enough to “startle” US officials.
After an abrupt notice of the end of funding for the Common Vulnerabilities and Exposures (CVE) program caused a small panic in the cybersecurity world, it appears that a contract extension option exercised by CISA will keep it safe at least until March 2026.
During the roughly year-and-a-half that the security breach was active, about 100 email accounts were monitored by the attacker and it is estimated that they viewed about 150,000 messages in total.
Early indications are that a recent rash of cyber attacks on Australia’s biggest superannuation funds were a credential stuffing campaign making use of information from older data breaches. The attacks compromised at least a few hundred accounts and led to the theft of at least AUD 500,000.
Versions prior to 2.2450.6 of the Windows client are subject to a WhatsApp vulnerability that allows threat actors to attack users via file attachments that look innocuous, such as image files.