-
AI Is Getting Really Good at Messing With Cybercriminals
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that they think …
-
The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn’t
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit …
-
FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe
FBI arrests Cypfer co-founder Edward Dubrovsky, now associated with CyberSteward, in the ShinyHunters investigation into the FBI jobs …
-
Anthropic Cuts Live Internet Access for Internal AI Tests After Claude Exploits Injection Flaws
Anthropic on Friday said it’s cutting off live internet access for all its internal evaluations following the discovery of new incidents in …
-
Two characters open up a world of typosquatting opportunities in Chromium browsers
Researchers say two characters available to typosquatters and phisherfolk can trick Chromium browsers into displaying lookalike URLs as …
-
Super Micro case ‘fixer’ pleads guilty to sending AI servers to China
A former contractor charged alongside Super Micro Computer’s co-founder has pleaded guilty to helping smuggle AI servers to China, Bob …
-
CVE-2026-108594 – Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the …
Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the OpenID Connect avatar fetch that ignores ports …
-
CVE-2026-108593 – 9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST …
9router 0.4.1 through 0.5.99 contains a configuration injection vulnerability in the POST /api/cli-tools/hermes-settings endpoint that …
-
CVE-2026-108592 – mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in …
mini-swe-agent 1.10.0 through 2.4.6 contains an information exposure vulnerability in BubblewrapEnvironment because bwrap omits –clearenv, …
-
CVE-2026-108591 – InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated …
InnoShop 0.9.2 contains a local file disclosure vulnerability that allows authenticated administrators with files_create permission to read …
-
CVE-2026-106610 – Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification …
Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege …
-
CVE-2026-105892 – Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) …
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in rtCamp Inc. rtMedia for WordPress, …
●●●
NVD
- CVE-2026-104022 – The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for …
- CVE-2026-108594 – Mealie 3.26.0 through 3.28.0 contains a server-side request forgery vulnerability in the …
- CVE-2026-104915 – The Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning plugin for …
- CVE-2026-108474 – In JetBrains Exposed before 1.5.1 sQL injection was possible via unescaped string …
- CVE-2026-93883 – The Advanced Classifieds & Directory Pro plugin for WordPress is vulnerable to Stored …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies