-
Authenticated Doesn’t Mean Safe: Why AI Agents Need Action-Level Security
Disclaimer: The views shared here reflect my personal experience and should not be read as an official Microsoft …
-
FBI confirms ‘multiple’ arrests related to ShinyHunters hack
The FBI and law enforcement partners have arrested “multiple” suspects as part of an investigation into a September hack allegedly …
-
Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes
Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an …
-
Security teams are starting to treat AI like staff, and that means managing it
Ask anyone who has worked in a security operations center what the job actually involves, and you’ll hear a lot about alerts. Thousands …
-
US judge rules a police Flock search was unconstitutional mass surveillance
A federal judge in Oklahoma has ruled that a deputy’s warrantless search of Flock’s licence plate reader network broke the US …
-
Debian’s latest kernel security update has 1,313 reasons to patch
The age of LLM-assisted security vulnerability discovery is really starting to bite. Debian’s latest Linux kernel security update comes …
-
WEBINAR: Introducing ADX Vision 2.0: Securing Generative and Agentic AI – Register Now!
AI has moved from assistant to actor. 86% of employees now use AI at work, and 49% use tools their organizations haven’t approved (Sapio …
-
Hackers Exploit 24 IoT Vulnerabilities to Install ClingSTUN Linux Backdoor
FortiGuard Labs has identified a Linux backdoor that exploits known vulnerabilities in internet-facing devices and converts infected …
-
Google pauses open source bug bounty program after rise in AI submissions
Companies like Google and Microsoft are find much bigger numbers of vulnerabilities in their own products as a result of AI. But the same …
-
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
A blank field. A public …
-
Proposed anti-Flock bills could spell trouble for license plate readers
Automated license plate readers (ALPRs) are cameras that photograph passing vehicles, read their number plates, and typically log the …
-
CVE-2026-67989 (ruby_llm): Polynomial-Time Regular Expression Denial of Service (ReDoS) vulnerability
Originally appeared on RubySec. crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular …
●●●
NVD
- CVE-2026-105169 – A security flaw has been discovered in kishor-23 food-waste-management-system …
- CVE-2026-88397 – ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET …
- CVE-2026-105170 – A weakness has been identified in kishor-23 food-waste-management-system …
- CVE-2026-105168 – A vulnerability was identified in kishor-23 food-waste-management-system …
- CVE-2026-105171 – A security vulnerability has been detected in kishor-23 food-waste-management-system …
EXPLOITS
- Ecava_ntegraXor IGX_16.0.701.10 – RCE
- WordPress 7.0.2 – Path Travesal
- Teltonika_RutOS 00.07.06.21 – command injection
- Food-Ordering 1.0 – LFI
- TigerGraph_Community_Edition 4.2.4 – arbitrary file write
SECURELIST
- MacSync under the microscope: new delivery methods and a new payload
- The Odyssey and Trojans again: MovieReaper attacks users in multiple countries through com
- Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
- The Odyssey and trojans again: MovieReaper attacks users in multiple countries via comprom
- NightEagle targets Russian companies