-
Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data
The Pentagon is informing more than 2 million current and former military members that their personnel records storing sensitive personal …
-
AI agents hacked the hackers, stealing email addresses from security research org
AI agents hacked the hackers – the Dutch Institute for Vulnerability Disclosure (DIVD) – via two zero-day bugs in its Zammad support …
-
CFPB can’t say if data on abandoned office kit is safe, watchdog finds
The US Consumer Financial Protection Bureau cannot confirm that IT equipment it left in four closed offices is secure, a watchdog has …
-
The EU Is About to Make Linux’s Vulnerability Management Problem Harder to Ignore
More CVEs, sprawling deployments, and new EU reporting rules are turning vulnerability management into a matter of evidence as well as …
-
Armadin nabs $255.5M to detect vulnerabilities with AI agent swarms
“Offense is uniquely advantaged right now,” Mandia said. “AI lets an attacker find and chain weaknesses faster than any human team …
-
A Practical Guide to Security for Growing Businesses
This guide aims to help you understand the concrete steps you can take to improve your company’s security and keep your business …
-
Experience What It’s Like to Travel in the Occupied West Bank
Traverse barriers and checkpoints in the occupied West Bank—your choices reflect the reality of nearly 3.5 million Palestinians who live …
-
Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
We found 70 websites that impersonate legitimate crypto projects that invite visitors to vote on the date of an upcoming rewards …
-
EU’s hodgepodge tech policy exposes members to Chinese vendor risks, says think tank
Depending on Chinese technology for European infrastructure poses risks that not every country takes seriously. So says the Royal United …
-
Suspected Chinese spies spoofed an Anthropic exec, ex-White House official in AI phishing
A suspected Chinese espionage group impersonated AI policy figures, including a senior Anthropic employee and a former White House …
-
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
This week, the useful words are boring ones: inspect, cache, compile, store, …
-
Police Arrest 16-Year-Old Suspected of Running KillSec, Seize Ransomware Leak Site and Servers
Police in Spain have arrested a 16-year-old whom investigators suspect of running the KillSec ransomware group. KillSec is accused of …
●●●
NVD
- CVE-2026-13313 – An Active Debug Code vulnerability in certain ASUS router models allows a remote …
- CVE-2026-103530 – A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the …
- CVE-2026-103531 – A flaw has been found in OpenSC up to 0.27.1. The impacted element is the function …
- CVE-2026-103532 – A vulnerability has been found in immich-app Immich up to 2.7.5. This affects the …
- CVE-2026-12545 – A flaw was found in rubygem-hammer_cli. A command injection vulnerability exists in …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies