Collaborate Disseminate
University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it e… Continue reading Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models
Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the wild.
The high-severity vulnerability, tracked as CVE-2026-11645 (CVSS score: 8.8), has been described as an out-of-bounds… Continue reading Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild – Patch Now
Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort.
But the same challenges persist. Ou… Continue reading The Hidden Security Risk in Modern Networks: The Work Between Tools
A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. The attack, called FROST, needs no native code, no extension, and no permission prompt.
You open the page, leave t… Continue reading New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined … Continue reading Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability, tracked as… Continue reading LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE
Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out of a container.
The flaw, CVE-2026-23111, sits in the kernel’s nf_tables packet-filte… Continue reading One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public
Meta on Monday said it detected and blocked spear-phishing attempts linked to Israeli spyware vendor NSO Group.
In addition, the tech giant said it’s filing a federal court contempt order against the company for violating a permanent injunction that b… Continue reading Meta Blocks NSO Group’s New WhatsApp Phishing Attack, Files Contempt Order
Check Point has warned of active exploitation of a critical vulnerability impacting Remote Access VPN and Mobile Access deployments that are configured to use the deprecated IKEv1 key exchange protocol.
The vulnerability, tracked as CVE-2026-50751 (CV… Continue reading Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups
Monday again. The weekend was meant to be quiet. It wasn’t. Last week had poisoned packages, a broken AI helper, and a worm tearing through repos. The ugly part: basic tricks still worked.
A chatbot got fooled. A bot token got leaked inside the malwar… Continue reading ⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More