A browser extension promoted as a Twitch viewing helper has been found sending live account tokens through servers controlled by its operator. The add-on,…
Category: EN
Using AI for Weapons Development
Last week, Anthropic released a long and detailed document describing current misuses of their Claude models. I’m still reading it, but I wanted to flag…
Cyclops Blink Evolves Into x86-64 Linux Implant With Packet Sniffing and Internal Network Scanning
Cyclops Blink has returned in a form that gives attackers a deeper view inside corporate networks. The malware was found on compromised Cisco Firewall…
FedRAMP Moderate Authorization for Palo Alto Networks’ Quantum-Safe Security
Palo Alto Networks has achieved FedRAMP Moderate authorization for Quantum-Safe Security (QSS), a turnkey Automated Cryptography Discovery and Inventory…
New ZcopyReaper Linux Kernel Vulnerability Enables Privilege Escalation Attacks
A new Linux kernel vulnerability dubbed ZcopyReaper allows an unprivileged local attacker to escalate privileges and potentially gain root-level control.…
Lost Phone Reporting Flaws Could Let Hackers Block Any Mobile Device for $4
A new security investigation has revealed serious weaknesses in the systems used by mobile carriers to block lost or stolen phones. Researchers found that…
AWS Systems Manager Agent Vulnerability Allows Attackers to Bypass Port-Forwarding Restrictions
A critical vulnerability in the AWS Systems Manager Agent could let authenticated attackers bypass remote-host port-forwarding restrictions and access…
CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CVE-2026-75650: StyleSmuggler — Critical RCE in Adobe Commerce and Magento
Security teams increasingly outflanked by AI agents
A report warns that non-human identities are growing beyond the ability of existing systems to track.
Mantax Otax Targets Android Phones With Spyware and Ransomware
Mantax Otax Android malware steals messages, PINs, and files, monitors screens, and uses ransomware and harassment to pressure victims into paying.
Texas Judge Finds TikTok Liable for Misleading Parents About Child Safety Controls
A Texas judge found TikTok liable for misleading parents about child safety controls, shifting the case toward penalties and possible restrictions.
OpenAI Agents Linked to 2,000 RubyGems Packages, Alleged RubyDoc RCE
Researchers linked OpenAI agents to RubyGems abuse and alleged RubyDoc RCE, highlighting risks around autonomous AI, build systems, and credentials.
Android Simplifies Secure Migration of Saved Logins
With the advent of Android’s new credential transfer feature, passwords and passkeys can be transferred directly between supported password managers…
Malicious Twitch Extension Exposes 31,000 Users’ OAuth Tokens
Socket has discovered a Twitch browser extension forwarding users’ OAuth tokens to a Russian bot service
South Korean Startup Suffers Breach Due to Encryption Management Failure
Modu-ui, a South Korean government backed startup support platform, suffered a data breach in July. The breach later disclosed a critical encoding key…
⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits
AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses, and automate more of the job. Some models are also…
Study Warns Enterprise AI Rollouts Are Outpacing Data Security Checks
Companies are adopting AI tools faster than they are testing whether their underlying data is appropriately secure, a new report from governance firm…
Malicious actors already using critical GitLab flaw, CISA and others warn
The vulnerability could let unauthenticated users access sensitive files from software-development environments.
Google’s new search redirects make links harder to check before you click
Google says its new opaque redirects tackle evolving abuse, but they also prevent users from checking a result’s destination by hovering over it.
U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited…