The NCSC has withdrawn a warning for an alleged SQLite vulnerability (CVE-2026-51302) after it appeared that the bug was likely hallucinated by an LLM. Security researchers, SQLite developers, and Red Hat were unable to reproduce the vulnerability and have labeled it as fictitious. Notably, MITRE accepted the CVE despite a lack of sufficient verification, leading […]
Microsoft warns of an active cryptojacking campaign in which AI chatbots lead users to malicious download sites. Attackers are now managing more than 150 fake websites that imitate popular Windows tools such as CrystalDiskInfo, HWMonitor, and DDU. For the first time, it has been publicly established that AI chatbots, alongside search engines, are being exploited […]