Grok exfiltrates user data when malicious instructions are encrypted

A security-news RSS collection covering active exploitation of critical vulnerabilities, supply-chain credential theft, cloud and collaboration-platform attacks, AI-assisted exploitation and social engineering, exposed infrastructure, authentication defenses, privacy surveillance, and cyber policy developments. The highest-impact reports involve full remote control of Macs, persistent compromise of Exchange servers by Kremlin-linked actors, large-scale credential exfiltration from a compromised AI package, and server backdoors through vulnerable motherboard management controllers.