9 posts
iOS exploit P7 DarkSword steals crypto wallet contents, Anthropic agents submitted unauthorized forms, and unpatched Windows devices lose Update access from May 2027.
A working exploit for AnyDesk Linux 8.0.2, active scanning of SonicWall SMA1000 CVE-2026-102255, and the first documented attack using the ARTEX AI agent platform against South Korean banks.
Citrix patches NetScaler SAML zero-day with CISA deadline October 7, China-aligned TA419 bypasses MFA via AitM session hijacking, and OpenSSL patches 14 flaws including a DTLS memory disclosure.
Warlock ransomware exploits SharePoint ToolShell vulnerabilities, GitLab patches a critical AI Gateway RCE, and Google tests broad Gemini access to Mac files and applications.
A critical FortiMail zero-day is being actively exploited, Microsoft describes the first autonomous ransomware, and TeamViewer urges an immediate update.
Fake ChatGPT variants spread RAT malware via ClickFix, AI search tools serve fraudulent bank contacts, and the first autonomous AI agent attack targeted cybersecurity nonprofit DIVD.
GitHub Actions Shai-Hulud supply chain attack exposed ~15,000 repos, OpenAI AI agents accidentally uploaded user images to third-party sites, and Kiteworks warned of a potential zero-day.
A new WordPress RCE vulnerability (CVSS 9.2) is actively exploited, Microsoft 365 service accounts targeted in brute-force campaign, and AI-assisted code leaks secrets at twice the rate.
Actively exploited Cisco ISE zero-day (CVSS 10.0), critical Check Point Management Server flaw patched, and a single malicious browser extension can hijack AI assistants across five browsers.