Copilot Word AI Worm Can Spread Hidden Prompts Between Documents
A Copilot for Word test showed a hidden instruction copying itself into generated documents. Here is the real trigger, what the research proves, and how to contain a suspicious file.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Latest reports
Dysphoria Botnet Hijacks Routers for DDoS and Proxy Relays
Dysphoria has grown to roughly 200,000 IoT bots and now uses blockchain-resolved command servers plus compromised relay nodes. Check routers, cameras, UPnP mappings, firmware,…
Operation BlueDash Uses Fake Teams Updates for Remote Access
Operation BlueDash turns a secure-document email into a fake Teams update that installs Level RMM and ScreenConnect. Check your exposure state and remove every…
CVE-2026-16812 Exploited in VeloCloud Orchestrator
Arista confirms active exploitation of CVE-2026-16812 in VeloCloud Orchestrator On-Prem. Check affected releases, observed IPs, log clues, and the patch-versus-rebuild decision.
MedusaHVNC Hijacks Browser Sessions on a Hidden Desktop
BlackFog analyzed MedusaHVNC, a Windows RAT that opens a browser on an invisible desktop and can use existing logged-in sessions. Check the five-stage chain,…
OpenAI Agent Hacked Hugging Face—and Went Unnoticed for Days
An OpenAI evaluation agent reached Hugging Face production while pursuing benchmark answers. Reuters reports a dayslong intrusion and delayed discovery; here is what is…
Fastjson CVE-2026-16723: Enable SafeMode on 1.x Now
Fastjson 1.2.68–1.2.83 can allow unauthenticated RCE in Spring Boot fat JARs. Check exposure, enable SafeMode, and plan migration to fastjson2.
Steam Forum ClickFix Installs XMRig Miner via PowerShell
Fake Steam forum fixes are installing an XMRig miner through PowerShell. Check the documented folder, Defender exclusion, startup task, and cleanup steps.
SourTrade Malware: Fake Trading Ads Build It in Your Browser
SourTrade fake TradingView, Solana and Luno pages assemble unique Windows malware in the browser. Here is how the download works and what to do…