-
Anthropic rolls out program for ‘long-term commitment’ to secure critical infrastructure, open source software
Anthropic announced a new program Thursday that will combine its AI tools with outside cybersecurity companies to find and fix …
-
Shai-Hulud worm makes jump to AI infrastructure with Tensorlake compromise
The credential-hijacking Shai-Hulud worm has struck again, this time burrowing its way into a popular AI agent platform SDK. Multiple …
-
TP-Link Faces 5 State Lawsuits: Are Its Routers Still Legal in the US?
Five states have sued TP-Link over router security and disclosure claims. Here’s how the lawsuits, FCC restrictions, and firmware …
-
ThreatsDay: Ransomware Affiliate Betrayal, WhatsApp RAT, Exposed Hacker Tools and 12 More Stories
The crooks have trust problems of their own. One ransomware affiliate decided to keep the profits for …
-
FBI Says China-Linked Hackers Ran Portal Giving Third Parties Access to Stolen Emails
Hackers tied to a Chinese cybersecurity company stole email from government organizations, law enforcement agencies, healthcare systems, …
-
High-severity Nvidia bug could crash GPU monitoring on exposed servers
Researchers found thousands of GPU servers exposing Nvidia’s DCGM Exporter to the internet, with hundreds potentially vulnerable to a …
-
Attackers hijack country-code domains to impersonate Google and other services
According to Google, attackers compromised infrastructure behind three country-code domain namespaces— (Ghana), (Sierra Leone), and …
-
How one bug bounty researcher chooses the features they investigate
As we kick off Cybersecurity Awareness Month, the GitHub Bug Bounty team is excited to spotlight one of the top-performing security …
-
Phishing Attacks Exploit Remote Management Tools and AI Email Assistants
Phishing attacks are reaching beyond stolen passwords. Attacks are increasing their use of legitimate remote management software to take …
-
OpenAI says Iran, Russia used AI journalists, think tanks to influence Western media
OpenAI disclosed Thursday it shut down two influence operations from Russia and Iran that used ChatGPT and other AI tools to create fake …
●●●
NVD
- CVE-2026-107315 – pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is …
- CVE-2026-17538 – The LatePoint – Appointment Booking & Reservation plugin for WordPress is vulnerable to …
- CVE-2026-107695 – FFmpeg before 8.1.3 contains an infinite loop vulnerability in the HLS demuxer that …
- CVE-2024-8122 – The WSO2 Identity Server fails to enforce a default expiry time for SMS One-Time …
- CVE-2026-94154 – The Aurora Heatmap plugin for WordPress is vulnerable to Stored Cross-Site Scripting via …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies