EdgeStepper Implant reroutes DNS queries and deploys malware via hijacked software updates

November 19, 2025Ravi LakshmananCyber ​​espionage/malware A threat actor known as PlushDaemon has been observed using a previously undocumented Go-based network backdoor (codenamed EdgeStepper) to facilitate adversary-man-in-the-middle (AitM) attacks. EdgeStepper “redirects all DNS queries to an external malicious hijacking node, effectively rerouting traffic from legitimate infrastructure used for software updates to attacker-controlled infrastructure,” ESET security researcher […]

ServiceNow AI agents can be tricked into turning against each other via secondary prompts

November 19, 2025Ravi LakshmananAI security / SaaS security A malicious attacker could exploit the default configuration of ServiceNow’s Now Assist generative artificial intelligence (AI) platform and leverage its agent capabilities to perform prompt injection attacks. According to AppOmni, second-degree prompt injection leverages Now Assist’s agent-to-agent detection capabilities to perform unauthorized actions that allow attackers to […]

TikTok now lets you choose how much AI-generated content you want to see

TikTok, the app that was once just a place to store user-generated content, has launched a new setting that allows users to choose how much AI-generated content appears in their “For You” feed. The company is also introducing more advanced labeling technology for AI-generated content. New AI-generated content (AIGC) controls are being rolled out within […]

Fortinet warns of new FortiWeb CVE-2025-58034 vulnerability being exploited

November 19, 2025Ravi LakshmananVulnerability/Network Security Fortinet has warned that a new security flaw exists and is being exploited in FortiWeb. This medium severity vulnerability, tracked as CVE-2025-58034, has a CVSS score of 6.7 out of a maximum of 10.0. “Improper Disabling of Special Elements Used in OS Commands (“OS Command Injection”) Vulnerability” [CWE-78] “FortiWeb could […]

European tech becomes political | Tech Crunch

Venture capital firm Atomico’s annual European Technology Status Report has been published, showing an upward trend in investment. But this year’s edition goes beyond the usual assessment of the technology ecosystem. It is part of an advocacy that reflects broader changes. European startups and investors are increasingly turning to lobbying. “It’s no longer enough to […]

Hugface CEO says we’re in an ‘LLM bubble’, not an AI bubble

Clem DeLang, co-founder and CEO of Hugging Face, says it’s not an AI bubble but an “LLM bubble” that may be ready to burst. At an Axios event on Tuesday, the entrepreneur behind the popular AI platform and community site agreed that the bubble story is a “trillion dollar problem” today, but said he doesn’t […]