-
A high-severity Linux kernel vulnerability, tracked as CVE-2026-72018, lets a local attacker with CAP_NET_ADMIN privileges escalate to root. This exploitation involves an out-of-bounds write in the Shared Memory Communications Direct (SMC-D) DIBS loopb…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors have targeted more than 5,700 Microsoft 365 accounts across 28 tenants in a password-spraying campaign that successfully breached seven forgotten service accounts lacking MFA. The activity, tracked by Proofpoint as UNK_CondorFiltration, f…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Microsoft has detailed a cloud-focused intrusion attributed to Storm-3068, in which attackers turned a compromised user account into a launch point for Azure DevOps abuse, Kubernetes credential theft, and potential access to connected cloud environment…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Unsloth has addressed a critical arbitrary code execution vulnerability in its Studio web interface. This flaw allowed a malicious Hugging Face model repository to execute attacker-controlled Python code simply by a user selecting or inspecting it. Uns…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly documented Android banking trojan named RATHat is demonstrating how generative AI can be operationalized inside mobile malware. The threat uses Google Gemini models to navigate unfamiliar Android interfaces, while its operator panel applies AI …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A newly analyzed SectopRAT campaign demonstrates how threat actors can weaponize trusted application components to conceal a full-featured remote access trojan and steal high-value data. The investigation found no evidence that the software vendor dist…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI has expanded its Codex platform with Codex Security Cloud, a cloud-hosted application security feature that continuously analyzes GitHub repositories, investigates potential vulnerabilities, and prepares remediation patches for human review. Ann…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenSSL has announced a high-severity vulnerability in its Datagram Transport Layer Security (DTLS) implementation that could allow a remote peer to read unintended plaintext heap memory during handshake data transmission or trigger a denial-of-service…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and Dutch National Police have announced the arrest of a 24-year-old man from Amsterdam who is suspected of playing a major role in the ShinyHunters cybercrime group. This development marks a significant step forward in an international investi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI has canceled the planned October release of GPT-6.1 Astra after internal testing revealed that the next-generation model did not meet the company’s safety and alignment standards. This decision underscores a growing challenge for AI develo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
