-
AI’s ‘middle class’ has gotten dramatically better at hacking
As the White House and federal agencies grapple with frontier AI models and their hacking capabilities, researchers are warning that the …
-
Uber Freight Investigates Data Security Concern
Uber Freight is investigating a data security incident following a hacker’s breach claims, according to reports from Reuter. The hacking …
-
What 50 open source projects taught us about security in the AI era
AI is changing the pace of open source development and the security challenges that come with it. Maintainers are reviewing unfamiliar …
-
Cloudflare and Trail of Bits now audit who Signal says you are talking to
Here is the problem, and it is easier to state than most people expect. End-to-end encryption scrambles a message so only the recipient can …
-
What to expect during CrowdStrike’s Fal.Con: Join theCUBE Aug. 31-Sept. 2
AI attacks on enterprise systems are picking up speed. The just-released CrowdStrike “2026 Threat Hunting Report” documented that …
-
Google Cloud Targets 2027 for First Major Post-Quantum Security Milestone
Google Cloud has divided its post-quantum migration into interim deadlines, targeting its first major risk domain for completion by the end …
-
The backup Microsoft never promised you
Confidence in an organization’s cyber recovery capabilities deserves scrutiny. If a ransomware attack disables the SaaS data tenanted in …
-
Shadow AI Impacts 74% of Organizations
Diana Kelley, Chief Information Security Officer at Noma Security: The fact that 74% of organizations found more AI tools than they …
-
A month with Anthropic’s Mythos left Rubrik rethinking remediation
Data resilience company Rubrik Inc. today said a month of scanning its own code with Anthropic PBC’s Mythos Preview model surfaced so …
-
Trump wants to grant private cyber firms a license to hack back
Donald Trump is allowing government agencies to contract private cybersecurity companies to carry out operations against cyber-enabled …
-
CodeRabbit raised $143m to read the code AI wrote
Code review is the step where somebody reads a change before it ships. A developer proposes an edit, opens what the trade calls a pull …
-
White House authorizes private US companies to hack foreign criminal networks
President Trump signed a National Security Presidential Memorandum on August 12 allowing vetted private companies to run offensive cyber …
●●●
NVD
- CVE-2026-46382 – The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting …
- CVE-2026-46688 – The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting …
- CVE-2026-16770 – PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via …
- CVE-2026-66446 – Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 ...
- CVE-2026-17431 – PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() …
EXPLOITS
- LuCI DHCPv6 – Lease Hostname Stored Cross-Site Scripting
- mcp-server-kubernetes 3.8.x – Argument Injection
- PraisonAI praisonaiagents 1.6.77 – Remote Code Execution
- Apache Gravitino 1.2.1 – SSRF
- Blocksy Companion 2.1.46 – RCE
SECURELIST
- Armored Likho expands its cyber-espionage toolkit
- Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver Pha
- Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selectio
- IT threat evolution in Q2 2026. Mobile statistics
- IT threat evolution in Q2 2026. Non-mobile statistics