-
ManageEngine has addressed a critical remote code execution vulnerability in ADSelfService Plus, which could allow an unauthenticated attacker to execute arbitrary code as NT AUTHORITY\SYSTEM from the Windows device’s logon screen. This vulnerability, …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WordPress has released version 7.1.2 to address a critical path-traversal vulnerability, tracked as CVE-2026-87902, which could allow unauthenticated remote code execution (RCE) under specific server and theme configurations. This flaw carries a CVSS v…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google released Chrome version 154 to the Stable channel for Windows, macOS, and Linux, fixing 108 security vulnerabilities. This update addresses 11 critical flaws, including memory-safety issues in the ANGLE, GPU, and WebGL components, which could be…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A detailed Microsoft SharePoint vulnerability, tracked as CVE-2026-65660, allows authenticated, low-privileged users to execute arbitrary code on vulnerable on-premises SharePoint servers. Initially categorized as a spoofing issue, technical analysis s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenAI’s new ChatGPT Computer History feature for macOS aims to enhance AI assistance by making it more context-aware. However, it also creates a potential risk of local data leaks that macOS-based infostealers could exploit. This feature convert…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Talos has released CAIRN, an open-source research toolkit that helps defenders hunt, classify, and track malware that uses artificial intelligence in attack operations. The Cognitive Artifact Intelligence Research Network uses a metadata-first ap…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The boundary between conventional conflict and cyber sabotage is narrowing as adversaries adopt artificial intelligence to industrialize deception, reconnaissance, and intrusion. In the post–Operation Epic Fury security environment, the most consequent…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A financially motivated threat actor used open-source autonomous AI agents to target hundreds of online retailers, stealing over 600,000 unexpired credit card records. The average cost per completed target is estimated at $25.46. This campaign, uncover…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
StreamRat, a newly identified Android banking trojan distributed through deceptive Meta and TikTok advertisements impersonating a free television-streaming service. The campaign, tracked as “Steamtv Esp.,” primarily targeted Spanish-speaking Android us…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A Windows malware implant named CLOSEDQUORUM that uses commercial large language models as an autonomous command-and-control layer, shifting tactical decisions from a human operator to an AI-driven voting system. The sample has not been confirmed in ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
