Microsoft Copilot reprompt exploit allowed attackers to steal your AI data

Varonis Threat Labs has published a report detailing a now patched security exploit discovered in Copilot that let attackers steal data with a single-click.
Cryptopolitan on MSN

Crypto protocol CrossCurve suffers $3M exploit

CrossCurve announced that its cross-chain bridge was attacked, resulting in a loss of about $3 million across multiple ...

Hackers exploit critical telnetd auth bypass flaw to get root

A coordinated campaign has been observed targeting a recently disclosed critical-severity vulnerability that has been present ...
Decrypt

CrossCurve Threatens Legal Action After $3M Cross-Chain Bridge Exploit

The protocol warned it may pursue criminal and civil action after identifying addresses tied to a hack of its token transfer ...
HHS

Exploit Attempts Surge for React2Shell

Hacker interest is high in a days-old vulnerability in widely used web application framework React, with dozens of organizations already falling victim to it, cybersecurity experts warn. See Also: ...

Saga pauses chainlet after $7M exploit that depegged its stablecoin

Saga has paused its SagaEVM chainlet after a bad actor exploited the chain to drain $7 million in stablecoins before converting them into Ether.
Windows Report

Microsoft Confirms Active Office Zero-Day Exploit, Deploys Emergency Fix

Microsoft releases an urgent out-of-band update for a critical Office zero-day flaw already exploited in real-world attacks.

Google says a WinRAR exploit for Windows is in 'widespread' use by government-backed threat actors 'linked to Russia and China'

Google has warned that well-known and already-patched exploit for the WinRAR file archiving and compression tool for Windows ...
CoinTelegraph

Balancer audits under scrutiny after $100M+ exploit

Reports showed four security companies conducted 11 audits of Balancer’s smart contracts starting in 2021, but a bad actor was still able to drain millions in staked Ether. Update (Nov. 10 at 2:55 pm ...