Researchers describe a new “Cryptographic Context Injection” technique that can bypass AI guardrails and exfiltrate full Grok chat histories. The method uses AES-encrypted payloads to influence the model into decrypting and executing attacker-controlled instructions within its own runtime—without requiring user interaction beyond normal chat. If validated broadly, this points to a shift from classic prompt-injection toward more covert, cryptography-assisted manipulation.
Source: Security Affairs
Critical Authentication Bypass in NASA/JPL AIT-GUI (CVSS 9.4)
A critical flaw (CVSS 9.4) was found in NASA/JPL’s open-source AIT-GUI, allowing unauthenticated attackers to send commands to spacecraft instruments. The issue reportedly stems from missing authentication, insufficient session/state verification, and lack of CSRF protection on state-changing endpoints. Even if limited to specific deployments, it highlights how “operator consoles” can become high-impact control-plane targets.
Source: Security Affairs
CISA Adds Zimbra Collaboration Suite (ZCS) Flaw to KEV Catalog
The U.S. CISA added a Zimbra Collaboration Suite vulnerability (CVE-2026-73570) to its Known Exploited Vulnerabilities catalog. Being listed in KEV generally means known active exploitation, which increases urgency for asset owners to patch or mitigate quickly. Organizations using Zimbra should verify exposure across email and collaboration environments, including instances not covered by standard patch cycles.
Source: Security Affairs
Iran-Linked Attack Disrupts UK Power Plant for Four Days, Mirrors U.S. Water Attacks
Reporting says Iran-linked threat actors disabled a UK power plant for four days—described as the first confirmed attack of its kind against UK energy infrastructure. The incident is also said to coincide with water infrastructure attacks across 12 U.S. states. For defenders, the operational theme is escalation in critical infrastructure disruption, emphasizing the need for improved detection around OT/ICS pathways and coordinated incident readiness.
Source: Security Affairs
ToxicPanda 2.0 Expands Across 16 Countries Targeting 349 Financial Apps
Zimperium’s zLabs reports ToxicPanda 2.0 is scaling beyond a Europe-focused nuisance model and targeting far more financial organizations. The malware reportedly abuses Android Wireless Debugging to deepen access and steal banking credentials, making mobile environment controls a key defensive battleground. Expect attackers to iterate on “quiet” preconditions—debug-capable devices and developer-style permissions—when expanding across regions.
Source: Security Affairs
Malware Hijacks Android Car Head Units via Infotainment Update Abuse
Kaspersky researchers found malicious behavior where Android-based car head units are turned into nodes of the BADBOX network. The technique involves abusing car infotainment update mechanisms to install proxy software. This is a reminder that “connected vehicle software supply chains” extend beyond servers—vehicle update pipelines and OEM/aftermarket tooling can be abused just like traditional application delivery.
Source: Security Affairs
You May Also Be Interested In...
Banking Trojans Manic, Grandoreiro, ToxicPanda 2.0 in the Spotlight (SecurityWeek)
Slopsquatting in the Supply Chain: Weaponized AI Hallucinations (GovTech)
Welcoming the Sri Lankan Government to Have I Been Pwned’s Free Gov Service (TroyHunt)