Rogue Agent Flaw Could Have Let Attackers Hijack Google Dialogflow CX Chatbots
A critical flaw in Google’s Dialogflow CX could have let an attacker with edit rights on one Code Block-enabled agent compromise other Code Block-enabled agents in the same Google Cloud project.
From there, they could read live conversations, steal the data users shared, and make the bots send attacker-written messages, including requests to re-enter a password.
Security firm Varonis found it
Source: The Hacker News
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 Device code phishing – the abuse of the OAuth 2.0 device authorization grant to steal access tokens –
Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer A cluster of nearly 800 malicious packages has been published to the npm registry as part of a new campaign
Watchtower Mittags-Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. a password is required — sudo: requests (recent log) Mehr Live-Daten und die komplette Historie im /attacks/ Watchtower-Bereich