Collaborate Disseminate
STAR Labs has published a Linux kernel exploit that turns an ordinary local user into root on the CentOS Stream 9 build it targeted. The flaw, tracked as CVE-2026-53264 (CVSS score: 7.8), is a use-after-free race in the kernel’s network traffic-control… Continue reading Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit
Microsoft has launched its first cybersecurity-specific model inside MDASH, its multi-model vulnerability identification and remediation harness.
The company says MDASH, using MAI-Cyber-1-Flash and GPT-5.4, scored 95.95% on CyberGym. It also claims th… Continue reading Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost
A maximum-severity security flaw impacting on-premises versions of Arista VeloCloud Orchestrator (VCO) has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2026-16812 (CVSS score: 10.0), is a case of operating system comma… Continue reading Attackers Exploit Arista VeloCloud Orchestrator Command Injection Flaw
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and tools for securing software and artificial intelligence (AI) agents.
The 37-member group spans cloud, security, enterpris… Continue reading NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
Dysphoria, an Internet of Things (IoT) botnet line tracked by CNCERT and XLab, has adopted blockchain-based name services and infected-device relays after a March law-enforcement operation against JackSkid infrastructure. The researchers say the design… Continue reading Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
Public exploit details released on July 27 show how an unauthenticated request can reach PHP’s eval() function inside vBulletin and execute code on an unpatched forum server. The attack requires no account, administrative access, or interaction from an… Continue reading Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
Monday starts with the usual promise that everything is under control. Then the logs wake up.
This week, trusted tools crossed lines, old flaws found new work, exposed systems stayed exposed, and attackers kept hiding inside normal-looking services. N… Continue reading ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
n8n has patched a high-severity expression-sandbox escape that could let an authenticated workflow editor execute operating-system commands on the server running the automation platform. Security Joes found the flaw while probing n8n’s February fix for… Continue reading n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs “secure document” lures to deliver legitimate remote monitoring and management (RMM) tools.
“The victim was directed through compromised web infrastructure … Continue reading Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
The China-linked cybercrime group behind the use of income tax-related phishing lures targeting Indian taxpayers, tax professionals, and corporate finance teams has been observed using a sophisticated crypter service called Cruciferra.
According to a … Continue reading Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware