-
Agentic security strategy faces a shrinking breach window
An agentic security strategy must account for software that can act on legitimate instructions in unexpected ways. Agents can use …
-
Oracle CISO puts humans at the center of AI security governance
As enterprises face AI-driven cyberattacks, AI security governance must control autonomous systems that can reach data, connect …
-
Fingerprint expands device intelligence for the AI-driven web
From bot detection to AI identity Traditional bot management has largely been built around a binary question: Is the visitor human or …
-
FBI to ShinyHunters: ‘We know how to find you’
The FBI’s cyber chief has a message for the criminals that hacked the bureau’s jobs portal last week: “We know how to find …
-
OpenAI Gets Sued Over the Hugging Face Hack
A nonprofit in California is doing what Hugging Face has not, and attempting to hold OpenAI legally accountable for the actions of its …
-
Russia’s Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor
Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their …
-
French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and …
-
Custom malware used in Citrix 0-day attacks targeting govt, banks, professional services
The public still doesn’t know who is abusing a critical Citrix vulnerability exploited as a zero-day weeks before disclosure, but we now …
-
Hackers Use Hijacked University Emails to Scam Students, Pose as FBI Agent
Proofpoint uncovers hackers using compromised university accounts to send fake job offers, steal credentials, and run gift card scams, …
-
iOS 27.0.1 Is Here: 3 iPhone Problems Apple Just Fixed
Apple’s iOS 27.0.1 fixes three iPhone problems involving Face ID restarts, camera artifacts, and an unresponsive touchscreen. The post …
-
AI models keep posting screenshots showing sensitive data from inside tech companies
Amid the growing concern about AI models escaping security simulations to hack websites comes word that these “superintelligent” blobs of …
●●●
NVD
- CVE-2026-101265 – A vulnerability was identified in Intelbras TIP 125i 4.3.35/4.3.41. The affected element …
- CVE-2026-101277 – A security flaw has been discovered in Trusted Domain Project OpenDKIM up to 2.11.0. The …
- CVE-2026-101263 – A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown …
- CVE-2026-102633 – libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability in …
- CVE-2026-101264 – A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown …
EXPLOITS
- CVE-2026-80428 Unauthenticated PHP Object Injection via Shibboleth – ILIAS < 9.22, 10.0 < 10.10, 11.0 < 11.3 - RCE
- Metabase 0.61.0 – Authenticated Remote Code Execution
- FreePBX 17.0.2 – Remote Code Execution (RCE)
- Ghost_CMS 6.19.0 – Remote Code Execution
- Bludit CMS 3.20.0 – Reflected Cross-Site Scripting
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies