Collaborate Disseminate
The OWASP GenAI Security Project has released the 2026 edition of its Top 10 for LLM Applications and, for the first time, the list was influenced by real-world incidents. The two top entries – Prompt Injection and Sensitive Information Disclosur… Continue reading OWASP 2026 LLM Top 10: “The model will be fooled”
“During a routine cyber evaluation, AI agents took sustained, unsanctioned action directed at real people and organisations,” UK’s AI Security Institute (AISI) disclosed on Tuesday. The agents’ actions included an attempted supply-cha… Continue reading AI agent deception moves from theory to reality in UK cyber tests
A phishing campaign impersonating Bank of America (BoA) is underway, trying to trick Windows users into installing ScreenConnect remote access software and then making it difficult to uninstall it. Different traps for Mac and Windows users By claiming … Continue reading Bank of America impersonators weaponize ScreenConnect, then make it hard to remove
Attackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) in N-able N-central, a remote monitoring and management (RMM) solution widely used by managed service providers, to gain access to managed endpoints. How the flaw was disc… Continue reading Attackers exploit N-able N-central flaw to reach managed endpoints (CVE-2026-18577)
A critical security vulnerability (CVE-2026-66066) in Ruby on Rails (aka Rails), one of the most widely used frameworks for building websites and web apps, may allow attackers to read sensitive files off a server and, in some cases, take full control o… Continue reading KindaRails2Shell threatens Ruby on Rails apps (CVE-2026-66066)
Russia-affiliated cyber espionage group Laundry Bear (aka Void Blizzard, aka TA488) is exploiting CVE-2026-42897, a cross-site scripting vulnerability in Microsoft Exchange, to target US and European government entities and a variety of private sector … Continue reading Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)
A static credentials vulnerability (CVE-2026-20316) in Cisco Secure Firewall Management Center (FMC), a platform for centrally managing multiple Cisco Secure Firewall devices across a network, is being leveraged by attackers, CISA warned. Two FMC flaws… Continue reading Cisco FMC static credentials exploited by attackers (CVE-2026-20316)
The first publicly documented cyberattack run end-to-end by an autonomous AI was an OpenAI benchmark test that escaped its sandbox and breached Hugging Face. In an incident post-mortem compiled with the input from Hugging Face and several hundred membe… Continue reading Hugging Face breach reignites open-weights debate, raises liability questions
JetBrains has fixed a critical vulnerability (CVE-2026-63077) affecting TeamCity On-Premises and is urging admins to upgrade self-hosted servers as soon as possible. “For those who are unable to do so, we have released a security patch plugin,… Continue reading JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)
Security researchers who discovered and reported CVE-2026-54121 (aka “Certighost”), a critical privilege elevation vulnerability in Active Directory Certificate Services (AD CS), have released a proof-of-concept (PoC) exploit for and techni… Continue reading PoC exploit released for critical AD CS domain-takeover flaw (CVE-2026-54121)