-
AI Scams Target Crypto Users, Not Protocols, and Wallet Security Is Catching Up
Picture a composite case drawn from documented scams where a tech professional spends forty minutes on a video call with a “compliance …
-
AI in your oven? Anthropic warns models ‘months away’ from self-replication on smart devices
Anthropic is warning that some of its artificial intelligence models could soon become “self-replicating” and find ways to infiltrate …
-
Part 2 – Cybersecurity journeys: What even is this job?
, I shared how three people found their way into security from a warehouse floor, a marketing desk, and a teenager’s bedroom. This week …
-
How to Transfer Passwords and Passkeys Between Android Password Managers
Android users can transfer passwords and passkeys between compatible password managers. Here’s how Credential Exchange works, how to import …
-
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential Theft
A flaw in SAP’s Cloud SDK for Python can send an application’s OAuth2 client credentials to a server an attacker controls, SAP said in a …
-
Attacker Chains Three Ivanti Connect Secure Zero-Days for Root Access, Only Two Patched So Far
An attacker chained three zero-day flaws in Ivanti Connect Secure, a VPN appliance, to run commands as root without logging in, security …
-
Docker Fixes Critical Two-Year-Old Hub Flaw That Let One User Push Images as Another
A flaw in Docker Hub, the registry where container images are published and downloaded, let one user push, pull, or delete images as …
-
Journalists subject to unlawful surveillance seek legal costs after ‘unreasonable conduct’ by PSNI
…
-
GitHub’s model for secret detection: Finding more secrets with less noise
GitHub’s context-aware secret classifier improves detection quality, raises weighted acceptance by 11.5%, and reduces median scan …
-
Canadian Cybersecurity Executive Arrested Amid FBI Investigation Into ShinyHunters
Canadian cybersecurity executive Ed Dubrovsky faces US extortion charges amid an FBI investigation into ShinyHunters. A Canadian …
-
ICANN Opens Consultation on Security Requirements for DNSSEC DS Automation
Automating DNSSEC key management could simplify registry operations, but failed updates risk disrupting domain resolution. ICANN is seeking …
-
Claude submitted fake murder tip to Philly police during summertime testing
An Anthropic AI model submitted a fabricated tip about an unsolved homicide through an online form run by the Philadelphia Police …
●●●
NVD
- CVE-2026-108939 – A vulnerability has been found in EricLBuehler mistral.rs up to 0.9.3. Impacted is the …
- CVE-2026-108940 – A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is …
- CVE-2026-74034 – Wazuh from 4.1.0 before 4.14.8 contains a missing origin check in wm_agent_upgrade that …
- CVE-2026-17484 – IBM i 7.3, 7.4, 7.5, and 7.6 could allow a local attacker to cause a denial of service …
- CVE-2026-108941 – A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies