
Conventional Phishing attacks involved tricking potential victims to enter their respective usernames and passwords on fake websites which resembled the genuine websites. Once the login credentials were captured, they were used to steal business as well as personal data. A new trend that has emerged is to trick users into downloading malware that once downloaded […]
Last month, I discovered something that stopped me cold during a routine penetration test. A developer had spun up an Ollama server to experiment with local AI models. Nothing unusual about that, except the server was publicly accessible with no authentication. The models it hosted had been trained on internal company data. This scenario plays […]
AI agents are moving fast from experimentation to everyday use. Tools like Moltbot promise automation, local control, and flexibility. But recent security findings show how quickly that promise can turn into risk when guardrails are missing. Researchers have uncovered exposed Moltbot instances, leaked credentials, and a malicious VS Code extension masquerading as an official AI […]