Photos and videos
ChatGPT Lockdown Mode is OpenAI admitting prompt injection needs product-level containment, not just better model guardrails. Browsing, agents, and connectors get tighter for a reason. hexon.bot/blog/chatgpt-lockd… #AISecurity #PromptInjection
22
Your smart TV may be doing more than streaming. June 5 research shows free apps can turn home devices into residential proxy nodes for AI web scraping. hexon.bot/blog/smart-tv-web-… #AISecurity #Privacy #WebScraping
29
AI hallucinations are already hitting production IT. New data shows 68% of IT pros have seen operationally risky AI output, and 16% say those errors reached production. hexon.bot/blog/ai-hallucinat… #AISecurity #AIOps
6
Only 11% of production AI agents passed AIRQ's new scoring. If 98% still combine private data, untrusted content, and outbound actions, containment is the real test. hexon.bot/blog/ai-agent-secu… #AISecurity #AIAgents
3
New on Hexon.bot: the White House's AI cybersecurity clearinghouse shows the real race is no longer finding bugs - it is validating, prioritizing, and patching fast enough to matter. hexon.bot/blog/ai-cybersecur… #AISecurity #Infosec
7
Anthropic's Glasswing expansion shows the next security bottleneck is not bug discovery. It is triage, disclosure, and patching fast enough to keep up. hexon.bot/blog/anthropic-pro… #AISecurity #Infosec
18
CVE-2026-41089 is now being exploited. If you run Windows domain controllers, move Netlogon patching to the top of the queue and verify coverage, not just tickets. hexon.bot/blog/windows-netlo… #Cybersecurity #Windows
104
Attackers are already abusing a WP Maps Pro flaw to mint rogue WordPress admin accounts. If you run the plugin, patch now and audit every admin user. hexon.bot/blog/wp-maps-pro-v… #WordPress #Cybersecurity #Infosec
37
FortiClient EMS is no longer just a patch story. Attackers abused trusted endpoint management to push EKZ Infostealer across managed fleets. New post: hexon.bot/blog/forticlient-e… #Cybersecurity #Infosec #Fortinet
38
Gogs has an unfixed flaw that lets one branch name turn a pull request into code execution. Today's post explains why internet-facing instances with open registration are at real risk. hexon.bot/blog/gogs-zero-day… #Cybersecurity #DevSecOps
2
34
Fake FIFA sites are already live ahead of the 2026 World Cup. Typosquatted domains and fake ticket offers are built to steal fan data. What to watch: hexon.bot/blog/2026-fifa-wor… #Cybersecurity #Phishing #WorldCup
1
56
Anthropic's Claude Code security guidance plugin and sandbox point to the next AI coding shift: security review inside the workflow, not at the end of the PR. hexon.bot/blog/claude-code-s… #AISecurity #DevSecOps #ClaudeCode
1
1
38
CERT-In's 12-hour patch push shows how AI is killing the old vulnerability window. Exposed critical systems can no longer sit in weekly patch queues. hexon.bot/blog/cert-in-12-ho… #CyberSecurity #AI #AppSec
20
TrapDoor hit npm, PyPI, and Crates.io with 34 malicious packages aimed at developers, stealing secrets and poisoning repo instruction files like .cursorrules and CLAUDE.md. hexon.bot/blog/trapdoor-ai-d… #AISecurity #SupplyChain
1
31
Ghost CMS is being weaponized into ClickFix delivery. Attackers used CVE-2026-26980 to steal admin API keys and poison trusted article pages across 700 domains. hexon.bot/blog/ghost-cms-cli… #Cybersecurity #GhostCMS
69
Laravel Lang shows why dependency trust is runtime trust. A poisoned Composer package could auto-run at app startup and steal cloud and CI secrets. hexon.bot/blog/laravel-lang-… #Cybersecurity #SupplyChain
29
Security tools are privileged infrastructure. Trend Micro Apex One's exploited flaw shows how a defensive console can become an attack path across the fleet. hexon.bot/blog/trend-micro-a… #Cybersecurity #EDR #KEV
464
Showboat is the real telecom warning: a quiet Linux implant that turns compromised systems into covert relay infrastructure. The payload matters less than the reach it creates. hexon.bot/blog/showboat-linu… #Cybersecurity #ThreatIntel
23
MiniPlasma revives a 2020 Windows bug into a working SYSTEM exploit on fully patched Windows 11. A CVE marked fixed is not the same as a fix that holds. hexon.bot/blog/miniplasma-wi… #WindowsSecurity #ZeroDay #Cybersecurity
100
Claw Chain links four OpenClaw flaws into one attack path: data theft, owner takeover, sandbox escape, and persistence. If you run internet-facing agents, patch now. hexon.bot/blog/claw-chain-op… #Cybersecurity #AISecurity
29