Researchers have identified a new attack vector called "workflow identity hijacking" that allows threat actors to exploit authorisation flaws in enterprise AI pipelines.
A new zero-click worm, developed using AI, can hijack Android and iOS devices through WeChat calls without any user interaction.
A new AI-built tool called WeWorm allows attackers to hijack WeChat accounts on Android and iOS devices through a zero-click VoIP exploit.
Fortinet has addressed critical security defects in FortiMonitorOnSight and its Privileged Access Agent Chrome extension that could allow authentication bypass.
The Gigabud Android banking trojan uses cloned work profiles to isolate banking apps, allowing fraudsters to bypass detection and execute transactions on seemingly clean devices.
