The campaign discovered by Push Security, dubbed “LLMShare,” utilizes Google ads to direct users searching for ChatGPT to a malicious shared page hosted on the legitimate chatgpt.com domain.
Tag: direct
AI, Apps, Global Security News, malware
AI chatbot recommendations lure users to cryptojacking malware sites
Cybercriminals are using AI chatbot interactions alongside poisoned search results to direct users to malicious download sites in an active cryptojacking campaign, Microsoft has warned. The campaign impersonates legitimate software tools such as CrystalDiskInfo, HWMonitor, Display Driver Uninstaller (DDU), FurMark, K-Lite Codec Pack, and PDFgear. Screenshot of search engine results showing a malicious source of…
AI, Apps, Endpoint, Exploits, Global Security News, Network Security, Risk Management
Ollama vulnerability highlights danger of AI frameworks with unrestricted access
A critical vulnerability in Ollama poses a direct risk of sensitive information leaks to more than 300,000 internet-exposed servers, researchers have found. The flaw, tracked as CVE-2026-7482, stems from an out-of-bounds heap read in Ollama’s model quantization pipeline. Ollama is one of the most popular frameworks for running AI models on local hardware. The flaw…
AI, Apps, Compliance, Global Security News, Risk Management
ServiceNow Pushes AI from Assistant to Operator
ServiceNow used its Knowledge 2026 conference to make a pretty direct case for where it thinks enterprise AI is headed. The company does not want AI sitting off to the side as a helpful assistant waiting to be called upon. It wants AI agents inside the systems where work actually happens, with enough governance to…
AI, Cybersecurity, Global Security News
From Mailbox to Revenue: Top 7 Direct Mail Platforms That Actually Deliver Results
In this post, I will show you the top 7 direct mail platforms that actually deliver results. Direct mail is no longer the slow, analog underdog of the marketing world. Today, the most forward-thinking brands are pairing physical mail with data intelligence, automation, and API-driven workflows to outperform purely digital campaigns. Whether you are a…
AI, Data Breaches, Global Security News
Learning from the Vercel breach: Shadow AI & OAuth sprawl
A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach shows a compromised OAuth app can lead to widespread impact across downstream customers. […]
AI, Global Security News
FIDO Alliance wants to keep AI agents from going rogue on online payments
AI agents are beginning to shop, log in, and complete tasks with little direct input. That shift is pushing the security industry to rethink how trust works when actions are carried out on a user’s behalf. The FIDO Alliance has announced a set of initiatives to build shared standards for these interactions, covering how AI…
AI, Global Security News
Exabeam expands ABA to detect AI agent threats across ChatGPT, Copilot, and Gemini
Exabeam has announced the expansion of Exabeam Agent Behavior Analytics (ABA). Without direct visibility into how employees use AI assistants, what they query, what data they share, how frequently they interact, and from where, organizations cannot establish a baseline for normal AI behavior, investigate potential misuse, or detect emerging agentic insider threats. New support to…
AI, APAC, Global Security News
Microsoft shuffles leadership as Copilot and AI agents reshape its core products
Microsoft is undergoing a regime change that could have a direct impact on its core business. Rajesh Jha, EVP for experiences and devices, which covers Microsoft 365 and Windows, has announced his retirement, and a succession plan. Jha will “transition out” on July 1 but remain in an advisory capacity. Interestingly, the company is appointing…
Global Security News
EcoFlow Launches DELTA 3 Max Plus in Australia Class-Leading 2kWh Portable Power Station with 3000W Output
Anderson-ready portable power station with built-in high-current DC output for direct 4WD and caravan integration
