Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility

CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
The post Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility appeared first on SecurityWeek.
Continue reading Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility→

Critical Flaws Discovered in Belgian eID Software Used by 2 Million People

The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies.
The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek.
Continue reading Critical Flaws Discovered in Belgian eID Software Used by 2 Million People→

Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.
The post Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data appeared first on Secu… Continue reading Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data→

Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.
The post Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix appeared first on SecurityWeek.
Continue reading Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix→

Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.
The post Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts appeared first on SecurityWeek.
Continue reading Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts→

How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones 

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.
The post How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones  appeared first on SecurityWeek.
Continue reading How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones →

New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts

Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.
The post New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts appeared first on SecurityWeek.
Continue reading New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts→

Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data 

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.
The post Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data  appeared first on SecurityWeek.
Continue reading Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data →