Collaborate Disseminate
Microsoft on Tuesday broke Patch Tuesday records by addressing an earth-shattering 974 vulnerabilities spanning its software portfolio, including two flaws that it said have been actively exploited in the wild.
These include 723 flaws in Windows, 111 … Continue reading Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a maximum-severity security flaw impacting N-able N-central to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agenc… Continue reading N-able N-central Pre-Auth RCE Flaw Exploited in the Wild
A previously undocumented financially motivated threat actor has been linked to attacks targeting Brazilian financial institutions since at least March 2026.
Cybersecurity company CrowdStrike is tracking the Brazil-based activity cluster under the nam… Continue reading Slim Spider Steals Crypto Custody Secrets From Brazilian Financial Institution
Whoever took nearly 4,000 bitcoin from the Liquid Network on Sunday, September 6, returned 3,400 of it the next day, Bitcoin’s public record shows. About 598.5 bitcoin has not come back.
Liquid is a Bitcoin sidechain that holds real bitcoin … Continue reading Liquid Hackers Return 3,400 Bitcoin Taken via Elements Bug, Still Holding $47M in BTC
Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user’s question as usual.
In the company’s proof of con… Continue reading ChatGPT Flaw Let a Planted Prompt Send a Victim’s Gmail Data to Another Account
Threat actors are continuing to leverage artificial intelligence (AI) to streamline their operations, with one financially motivated hacking group employing an autonomous, multi-agent attack framework to carry out a large-scale credential harvesting ca… Continue reading Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours
Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones.
The person being called does not have to answer or touch their phone for it… Continue reading WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls
In the last six months, Chainguard doubled its output from 500 million to more than 1 billion container build manifests. We also surpassed 3,000 unique container images and 675,000 image versions in our catalog. Those are the headline numbers, but I wa… Continue reading What It Took to Reach 1 Billion Build Manifests
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says.
FreeIPA is the system that determines who may log in across a Linux domain a… Continue reading FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild.
The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has… Continue reading Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell