-
Jailbroken AI Agent Ran Two-Week Attack on European Telecom
A jailbroken AI agent has spent more than two weeks attacking a European telecommunications provider and 13 organizations hosted on its …
-
Simplify cross-partition access with AWS IAM outbound identity federation
outbound federation to assume roles in other Amazon Web Services (AWS) partitions. When your workloads run across AWS partitions such as …
-
November 2026 Android Security Update Fixes 3 Critical Remote Code Execution Flaws
Google’s November Android update fixes three critical remote code execution flaws, but its two patch levels cover different …
-
Bitter Hackers Deploy New PapRAT Backdoor in Cyberespionage Campaign Targeting South Asia
The South Asian cyber espionage group known as Bitter (aka APT-C-08, APT-Q-37, Hazy Tiger, Orange Yali, T-APT-17, and TA397) has been …
-
53% of Organizations Lack Definition For ‘Normal’ AI Agent Behavior
According to a report by Abnormal AI, 46% of security professionals say they are not at all effective at establishing what normal behavior …
-
Hackers abuse refrigeration controllers to send spam and route proxy traffic
Internet-exposed refrigeration controllers used in supermarkets and cold storage facilities are being hijacked and turned into …
-
ARTEX goes from pentesting tool to attacker staple in three months
Attackers have long repurposed red-team tools such as Cobalt Strike and Metasploit. ARTEX is following the same path, only much …
-
More than 400,000 Russians killed fighting in Ukraine war, leaked data suggests
More than 400,000 Russians have been killed fighting in Ukraine since Moscow launched its full-scale invasion nearly five years ago, …
-
Microsoft’s Azure Linux gets 470-plus security fixes in one almighty patching session
Microsoft has unleashed a whopper of an update for Azure Linux, packing more than 470 CVE fixes into a single release as the software …
-
New Supply Chain Attack Compromises Tens of Thousands of GitHub Repositories
Security researchers at Socket have uncovered a new software supply chain attack that has affected tens of thousands of GitHub …
-
Who Gives A Crap? Hackers, apparently, after toilet paper maker’s customer data exposed
Toilet paper purveyor Who Gives A Crap has found itself in a bit of a mess after an intruder accessed customer information through a …
-
Cloudflare Develops Public Certificate Authority for Post-Quantum Web Security
Cloudflare has tested Merkle Tree Certificates (MTCs) as an alternative to traditional certificate chains, reporting 9% faster median …
●●●
NVD
- CVE-2026-124500 – A security flaw has been discovered in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. …
- CVE-2026-19552 – When ca_certs parameter was supplied to ssl.get_server_certificate() function, the …
- CVE-2026-124501 – A weakness has been identified in Tidelift moto up to 5.2.4. Affected is an unknown …
- CVE-2026-124499 – A vulnerability was identified in Fengoffice Feng Office up to 3.11.13.11/4.2.1.2. This …
- CVE-2026-124502 – A security vulnerability has been detected in yungifez Skuul School Management System up …
EXPLOITS
- PHP2Shell (CVE-2026-109618) – PHP core versions after v5.4 – RCE
- Open eClass 3.15 – RCE
- Keycloak 26.7.2 – Unauthenticated Account Takeover
- South River Technologies Titan MFT Server 26.0.0 – code execution
- Synametrics Syncrify 6.2 – command execution
SECURELIST
- Virtualization security: attack layers and misconfiguration impact
- The SOC Files 5: Ghost in the pipeline, or a fileless SharePoint breach by Storm-2603
- MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT dev
- CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
- Filter generation in practice: from algorithms to LLMs