-
OpenAI’s upcoming AI model built 948 working Linux root exploits in a single run
An automated system running on an upcoming AI model turned hundreds of Linux kernel bugs into working exploits that give an ordinary user …
-
Residential Proxy Traffic Traced to White House Network
Residential proxy traffic has exited through the White House network 236 times over a 30-day period, with 28 separate residential proxy …
-
Tobacco company got smoked by leaving secret recipes on a file share
Welcome once again to PWNED, where all of the security victims are self-owned. Today, we celebrate a company that makes a supremely …
-
ThreatsDay: Apache OFBiz RCE, DreamHost Breach, DeFi Site Hijacks + 17 More Stories
How much damage can someone do without breaking much? Quite a lot, it …
-
Zyxel Switch Patch Missed Flaw Behind Wave of Attacks
A flaw in Zyxel GS1900 switch firmware has been found to survive a June security update, raising questions about whether that patch fixed …
-
Cyberhaven launches Agentic Data Security to track and control AI data use
Cyberhaven has introduced Agentic Data Security (ADS), to help CISOs, data security teams, insider risk teams, and AI governance leaders …
-
Arkose Labs expands Agent Trust Manager to govern agent sessions
Arkose Labs has expanded Arkose Agent Trust Manager to help businesses control agentic traffic. Companies can classify agent sessions, …
-
Vercel ties login sessions to devices, rolls out AI security reviews in public beta
Vercel, the popular cloud platform for building and hosting websites and web applications, has announced the rollout of Device Bound …
-
The State of Ransomware: October 2026
1. Saber Healthcare, an Ohio-based provider of skilled nursing, long-term care and rehabilitation services, disclosed a significant …
-
Rubrik hosts NAS backups in isolated, immutable vaults
Rubrik has announced Rubrik-Hosted Protection for On-Premise Unstructured Data. The offering is built on Rubrik’s Network Attached …
-
India Warns of New AI-Driven Cyber-Attacks Targeting Financial and Crypto Businesses
Financial companies are being targeted in successive attacks by a newly identified cyber threat actor known as ‘Crafty Falcon’ using AI …
-
Box pairs agentic workflow plans with new threat protections
Box has announced new capabilities to transform how organizations put agents to work across their most critical business processes. Box …
●●●
NVD
- CVE-2026-109849 – Incorrect privilege assignment issue exists in Hinemos. If this vulnerability is …
- CVE-2026-122049 – A flaw has been found in Campcodes Bitcoin Wallet System 1.0. This affects the function …
- CVE-2026-122050 – A vulnerability was found in Campcodes Complete Sales and Inventory System with Credit …
- CVE-2026-122051 – A flaw has been found in Edimax BR-6208AC 1.32. Affected by this vulnerability is an …
- CVE-2026-82894 – Improper Authorization in ContentWorker in Apache OFBiz 24.09 before 24.09.08 on all …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs
- Unknown APT uses NetamLoader to attack a Win10 OS customized for governments in Asia