The Wire — TIE

INC Archive of Our Own experiences major outage after suspected security incident brief 1 src 22:31

INC Chainalysis reports cybersecurity incident with no evidence of data compromise brief 1 src 21:15

POL DOJ seeks privacy safeguards for potential sale of Character.AI user chats brief 1 src 21:01

RES Irregular finds Zhipu AI's GLM-5.3 completes three multi‑stage cyber scenarios but repeatedly breaches instruction constraints brief 1 src 20:49

THR North Korean Lazarus Group APT targets blockchain firms with TraderTraitor malware brief 1 src 20:49

INC Bunny.net reports unauthorized access to an Armenia CDN node and revokes TLS certificates brief 1 src 20:46

INC Revolve discloses breach exposing payment card numbers of over 128,000 customers brief 1 src 19:16

RES Executive focus on continuous identity governance grows as AI agents expand attack surface brief 1 src 18:19

THR Apple notifies users in 99 countries of mercenary spyware infections 1 src 17:16

EXP BeyondTrust Remote Support vulnerable to unauthenticated file upload leading to remote code execution (CVE‑2026‑102764) 1 src 17:03

EXP Signaling protocol flaws in SS7 and Diameter enable tracking, interception and impersonation of mobile users brief 1 src 16:30

INC Florida Department of Education reports breach exposing SSNs of nearly 5 million aid applicants brief 1 src 16:18

POL DOJ issues grand jury subpoenas to California election offices amid voter‑roll dispute brief 1 src 16:18

THR Backdoored Claude Code VS Code extension on Cursor Marketplace installs persistent SSH keys brief 1 src 15:03

RES Passkeys improve authentication but do not solve broader identity‑trust challenges 1 src 14:30

EXP Kaspersky uncovers new supply-chain malware targeting Asian government Windows systems brief 1 src 12:48

INC Syrian Electronic Army hacker sentenced to 42 months for AP tweet hack that caused $136 B market plunge brief 3 src 12:33

RES Safe Remediation Framework Promotes Evidence‑Based Deployment of Security Controls 1 src 12:33

EXP WordPress core update race condition exploited within hours of patch release brief 2 src 12:30

EXP VulnCheck releases open-source repository of initial‑access exploits and detection artifacts 1 src 12:18

THR Researchers uncover PNG palette technique used to stage shell commands in ClickFix attacks 1 src 12:18

EXP CISA Expands KEV Catalog with Multiple Actively Exploited Zero‑Day Flaws Across Major Vendors brief 4 src 12:00

INC Russian retailer Poryadok disrupted for five days after cyberattack 1 src 11:48

THR Worm Eliminates Competitor's Malware and Gains Control brief 2 src 11:45

RES Mistral AI releases open-weight Large 4 model despite warnings of cyber‑attack misuse brief 1 src 10:33

THR Compromised Claude Code VS Code extension used to install persistent SSH backdoor on up to 5,000 users brief 3 src 10:31

RES Incident response plans must include out‑of‑band communication channels for compromised email and collaboration tools 1 src 10:18

RES Researchers outline algorithmic and LLM‑assisted methods to auto‑generate security alert filters 1 src 10:15

EXP Drupal Commerce Core Authorization Bypass (CVE-2026-118539) Actively Exploited in the Wild brief 1 src 09:01

INC Amadeus passenger service system breached, exposing reservation data of Japanese and Korean airlines brief 1 src 07:16

THR U.S. banks report unauthorized AI agents accessing customer accounts 1 src 05:46

THR Malware campaign abuses Hugging Face model hub to hijack GPUs for cryptomining brief 1 src 03:34

RES Guide to Deploying a Local Ghidra Server for Persistent Malware Analysis Projects brief 1 src 03:31

RES AI-driven surge in CVE submissions strains maintainers and NVD processes brief 1 src 02:44

RES LevelBlue releases Q3 2026 TTP briefing highlighting identity compromise and data‑extortion trends brief 1 src 02:44

RES Sectigo reports 2026 State of Crypto Agility, highlighting shorter TLS lifespans and PQC adoption 1 src 02:44

THR Silent Ransom Group leak highlights shift to pure data extortion and risks for law firms 1 src 02:44

THR Cloudflare reports Q3 2026 surge in short‑burst DDoS attacks and decline of ultra‑large botnet floods 1 src 02:44

RES Bitdefender and NETGEAR report TVs, smart plugs and NAS devices make up two‑thirds of home IoT vulnerabilities 1 src 02:44

THR Intel 471 reports surge in initial‑access sales, ransomware and vishing targeting Italian firms in 2026 1 src 02:44

EXP Unauthenticated remote code execution in Gotenberg via ExifTool metadata key injection 1 src 02:43

EXP VulnCheck analyzes exploitation of Gotenberg CVE-2026-42589 and the custom Go reverse shell cache_base 1 src 02:43

EXP zip2 crate’s dual-header parsing flaw lets attackers bypass file‑type checks and overwrite files 1 src 02:43

EXP Wing FTP Server flaw lets admin‑level users escape base folder and achieve root‑level code execution 1 src 02:43

EXP WordPress releases 7.1.4 update fixing multiple remote code execution and XSS flaws brief 1 src 02:43

EXP TeamViewer patches three critical client flaws, including remote code execution via screen‑buffer overflow brief 4 src 02:43

EXP Veeam Management Pack for Microsoft System Center receives patches for three high‑severity RCE flaws 1 src 02:43

RES Tor Project releases Tor Browser 16.0 with redesigned settings and privacy enhancements 1 src 02:43

EXP Jenkins releases patches fixing deserialization, XSS, and agent command vulnerabilities brief 1 src 02:43

EXP Endor Labs AI SAST uncovers two Apache Kafka zero‑day memory‑allocation flaws, patched with CVEs 1 src 02:43

THR SkyW4lker phishing kit abuses Microsoft 365 device‑code flow to steal credentials 1 src 02:43

THR Talos discovers NIK C2, an AI‑enabled Windows RAT that leverages OpenAI API and can deploy screen‑lock ransomware brief 1 src 02:43

THR MR ROBOT Android Malware‑as‑a‑Service rents banking trojans to steal OTPs and payment credentials in India 1 src 02:43

THR FBI seizes Virtualine.net, intensifying pressure on bulletproof hosting providers 1 src 02:43

THR Malware hijacks AI coding agents via malicious Solana starter‑kit repository, installs NetSupport RAT 1 src 02:40

THR Malicious Chrome extensions hijack searches for over 13 million users brief 1 src 02:40

INC Ukrainian police dismantle group that stole over 500,000 hryvnias from bank customers brief 1 src 02:40

POL Norwegian Security Authority raises national cyber risk level to HIGH and issues comprehensive mitigation package 1 src 02:40

POL Turkey presents Digital Sovereignty Strategy at presidential cybersecurity board meeting brief 1 src 02:40

POL GCHQ unable to account for thousands of USB sticks and other removable media, watchdog finds brief 2 src 02:40

THR EU warns North Korean cyber workers scheme generates revenue for weapons programs 1 src 02:40

POL US, EU and allies impose new sanctions on North Korea for cyber fraud and weapons proliferation 2 src 02:40

POL House Democrats urge Trump to retain AI chatbot prompts under Presidential Records Act 1 src 02:40

POL NIST releases roadmap for migrating to post‑quantum cryptography standards brief 1 src 02:40

THR Former Roskomnadzor employee credited with writing most of code for AIVPN VPN service 1 src 02:39

THR Malware called MeshAgent used to steal high‑stakes poker players’ cards and funds 1 src 02:39

INC Warhorse Studios confirms serious cyberattack on its development systems brief 1 src 02:39

INC Columbia University reaches $16.1M settlement over May 2025 data breach affecting U.S. residents brief 1 src 02:39

INC So-net reports breach of member database exposing over 2 million personal records 1 src 02:39

INC Cărturești reports cyber incident causing website and loyalty service outage brief 1 src 02:39

THR SETTRA ransomware group linked to attack on Israel's largest car importer, Colmobil 1 src 02:39

INC Bithumb probes data leak after internal mobile system hack brief 1 src 02:39

INC DHS single sign‑on system compromised, leaking thousands of employee records and group data brief 1 src 02:39

THR ESET report details China, Iran, North Korea and Russia-aligned APT operations in H2 2026 1 src 02:39

INC Polymarket suspends trading after third‑party JavaScript siphons $2.5 M of crypto brief 3 src 01:15

RES RequestRocket launches zero‑trust runtime access control platform for AI agents and APIs 1 src 00:49

INC Binance investigates possible $5.8 billion crypto theft brief 9 src 23:00

THR Chrome extensions used to hijack searches redirect millions to Bing and Yahoo 1 src 22:33

THR Hugging Face model repositories abused to hijack GPU servers for crypto mining 1 src 22:30

THR Nextron details AI-driven penetration testing frameworks ARTEX and Cairn and detection prospects 1 src 22:17

EXP Eight eMudhra certificate keys cracked; browsers and OSes block them 1 src 21:15

POL General Motors to pay $220 million settlement over unauthorized driver‑data sales 1 src 20:03

THR Fake iOS crypto app impersonating Padre Terminal stole $23K from 27 Solana wallets 1 src 19:30

EXP Linux Kernel IPv6 AH routing header integer underflow flaw patched to prevent local privilege escalation 1 src 19:19

EXP Linux Kernel patch fixes Logitech HIDPP use‑after‑free privilege escalation flaw 1 src 19:19

EXP Linux Kernel CIFS driver use‑after‑free flaw enables local privilege escalation 1 src 19:19

EXP Linux Kernel XFRM Subsystem Use-After-Free Flaw Enables Local Privilege Escalation 1 src 19:19

EXP FreeBSD releases patch for kernel TTY race condition that enables local privilege escalation 1 src 19:19

EXP MLflow fixes remote code execution flaw in PickleEvaluationArtifact parsing 1 src 19:19

EXP MLflow Tracking Server jobs flaw lets attackers disclose service‑account data 1 src 19:19

EXP MLflow Tracking Server flaw enables privilege escalation via missing authorization check 1 src 19:19

EXP ZDI advisory reveals privilege escalation flaw in MLflow tracking server 1 src 19:19

EXP ZDI advisory flags remote code execution flaw in MLflow SHAP load_explainer 1 src 19:19

EXP MLflow fixes unauthenticated SSRF and information disclosure in get-artifacts function 1 src 19:19

EXP MLflow fixes remote code execution flaw in _load_model deserialization function 1 src 19:19

EXP MLflow patched to fix server‑side request forgery in webhook handling 1 src 19:19

EXP MLflow AI Gateway SSRF vulnerability patched in version 3.17.0 1 src 19:16

THR US voting machines face certification gaps and potential AI-driven influence risks 1 src 18:03

RES Security leaders draw resilience lessons from a personal cancer diagnosis 1 src 18:00

EXP Linux kernel TCP use‑after‑free (CVE‑2026‑98432) scores 9.8, patches pending for Ubuntu and RHEL brief 3 src 17:01

RES noalloc library adds static analysis to enforce zero‑heap allocations in Go code 1 src 16:46

RES Microsoft recognized as Leader in IDC 2026 Modern Endpoint Security Market 1 src 16:34

EXP Ubuntu releases fix for high‑severity Linux kernel use‑after‑free (CVE‑2026‑98432) 1 src 16:15

EXP Hitachi Energy TRO600 series devices affected by two critical RCE vulnerabilities 1 src 15:19

EXP Hitachi Energy issues CISA advisory for OS command injection and Dirty Frag flaws in CoreTec control system 1 src 15:19

EXP Siemens releases patches for Mendix SAML authentication bypass (CVE‑2026‑89209) 1 src 15:16

RES Google unveils Gemini 4 Carbon, AI model topping benchmarks for vulnerability detection, exploitation and patching 3 src 14:18

POL FTC orders airlines and gig platforms to disclose personalized pricing and worker pay methods 1 src 14:03

INC Belgian finance ministry shuts down main tax portal after cyberattack ahead of filing deadline 1 src 13:46

THR Researcher finds 26,400 working cloud and AI API keys exposed in public Gitee repositories brief 2 src 12:33

RES AI-driven automation reshapes security operations and creates the new “Threat Operator” role 1 src 12:33

EXP Telegram Android vulnerability allows code execution via answered voice calls 1 src 12:33

INC iRhythm breach impacts over 8.1 million patients, filed with HHS brief 1 src 10:18

RES Guidance on Securing Model Context Protocol (MCP) Servers Ahead of LLM Deployments 1 src 09:16

EXP Cisco SD-WAN vulnerability CVE-2026-20127 exploited to install KeyDrift malware that harvests encryption keys brief 4 src 09:01

THR Unknown APT leverages NetamLoader to compromise custom Windows 10 builds used by Asian governments 2 src 08:18

RES Open-source Bernstein tool adds deterministic scheduling and signed audit logs for AI coding agents 1 src 07:06

RES HPE publishes security bulletin library for its product vulnerabilities 1 src 04:32

THR ICE conducts large-scale surveillance of left-wing groups in Minnesota and beyond 1 src 04:17

EXP Unauthenticated file read in LiteLLM Enterprise proxy exposes master key and API credentials 1 src 03:18

THR SANS Stormcast highlights ClickFix macOS/Windows campaign, EDK II PXE RCE (CVE‑2026‑97631), and Qwen AI data‑exfiltration 1 src 03:18

THR New ClickFix campaign serves fake Cloudflare verification pages to macOS and Windows users 1 src 03:18

EXP Pre-boot Remote Code Execution in EDK II PXE driver allows unauthenticated network attacker to execute code before OS boot 1 src 03:18

RES CrowdStrike proposes Guardrail‑Based Vulnerability Discovery using AI refusals 1 src 03:18

RES Microsoft outlines how to collect and filter M365 Copilot data using Purview eDiscovery 1 src 03:15

POL U.S. lawmakers seek details from DoorDash on deployment of Chinese AI models 2 src 03:04

RES Booz Allen releases study on AI‑generated code risks and supply‑chain security 1 src 03:04

RES BaxBench benchmark evaluates LLMs on functional correctness and security of backend code 1 src 03:01

RES Researchers demonstrate model steering using a small artifact without altering base weights 1 src 01:20

INC The Intercept’s publication of an NSA report helped trace and arrest leaker Reality Winner 1 src 00:19

POL ICANN key‑holder ceremony secures DNS root key generation 1 src 00:19

EXP GreyNoise reports active exploitation of PHP CVE‑2026‑109618/109619 (php2shell) with four confirmed attacks 1 src 22:19

THR Volt Typhoon’s Silent Train framework hijacks SOHO routers using chained zero‑day exploits 1 src 22:19

EXP Apple Safari jsToWasm entrypoint type confusion flaw patched by Apple 1 src 22:18

EXP Apple releases patch for macOS CoreText out-of-bounds read flaw 1 src 22:18

EXP AVG Internet Security avgToolsSvc service contains local privilege escalation flaw 1 src 22:18

EXP Valkey patch released for remote code execution flaw in clusterCreatePublishMsgBlock handling 1 src 22:16

INC DHS leak reveals personal data of over 41,000 employees and contractors brief 4 src 21:31

POL Federal Appeals Court Declares West Virginia’s Daniel’s Law Unconstitutional, Boosting Data Broker Rights 1 src 21:01

INC Japan Airlines discloses breach affecting 92,000 customers after Amadeus provider hack brief 2 src 20:46

POL Microsoft advises Entra ID admins to transition users to passkeys before SMS and voice auth retirement 1 src 20:15

RES Discord will make public server messages searchable on the web 1 src 18:45

POL Privacy group noyb files EU complaints against Scale AI over worker surveillance 1 src 18:18

THR Retail sector faces heightened ransomware, data theft and extortion threats ahead of 2026 holiday peak 1 src 18:15

EXP Logic-flaw chain used to escape Microsoft Edge sandbox disclosed after $175,000 Pwn2Own win 2 src 17:48

POL Google launches Registered App Stores program allowing one‑tap installs from approved third‑party stores outside the U.S. 1 src 17:46

POL Lawfare proposes First Amendment‑based framework for regulating AI model weights 1 src 17:15

EXP Zero-day stack buffer overflow in Alpine iLX-F511 Android Auto service enables remote code execution 1 src 17:03

EXP Zero-day heap overflow in Alpine iLX-F511 Bluetooth OBEX handling enables remote code execution 1 src 17:03

EXP Zero-Day Remote Code Execution Flaw Discovered in Ultralytics torch_load Deserialization 1 src 16:49

EXP Zero-Day Code Injection RCE Found in Ultralytics check_det_dataset Function 1 src 16:49

EXP Zero-Day Command Injection in Ultralytics torch_safe_load Enables Remote Code Execution 1 src 16:49

EXP Zero-Day Code Injection RCE Found in Ultralytics parse_model Function 1 src 16:49

EXP Zero-day path traversal RCE discovered in Ultralytics Google Drive integration 1 src 16:49

EXP Zero-day RCE vulnerability discovered in Ultralytics’ load_dataset_cache_file function 1 src 16:49

EXP Zero-Day Code Injection RCE Found in Ultralytics parse_model Function 1 src 16:49

EXP Zero-Day SSH Hard-Coded Credential Flaw Enables Remote Code Execution on Alpine iLX-F511 Devices 1 src 16:49

EXP Zero-day local privilege escalation discovered in Alpine iLX-F511 Fiv service 1 src 16:49

EXP Zero-day stack buffer overflow in Alpine iLX-F511 vCard parser enables remote code execution via Bluetooth 1 src 16:49

EXP Zero-day stack buffer overflow in Alpine iLX-F511 framework service enables remote code execution 1 src 16:49

EXP Zero-day stack buffer overflow in Alpine iLX-F511 Bluetooth service enables remote code execution 1 src 16:49

EXP Zero-Day Remote Code Execution in Alpine iLX-F511 Framework Service Disclosed 1 src 16:49

EXP Zero-day out-of-bounds read in Alpine iLX-F511 Bluetooth stack disclosed by ZDI 1 src 16:49

EXP Zero-day command injection discovered in Alpine iLX-F511 diagapp component 1 src 16:48

EXP Zero-day stack buffer overflow in Alpine iLX-F511 Android Auto handler enables remote code execution 1 src 16:48

INC Moldova probes foreign-state role in large-scale government data breach 1 src 16:46

EXP Apple CoreGraphics rasterizer bug (CVE‑2026‑86950) exploited in the wild and patched in iOS 26.7.1 1 src 16:18

THR Volt Typhoon leverages Silent Train framework to conceal zero‑day attacks brief 6 src 16:15

POL UK government to consult on making software vendors liable for cyber breaches 1 src 15:48

THR Belarus-linked hackers increasingly act as proxies for Russia, ESET reports 1 src 15:31

RES Upwind Security secures $400 million Series C, valuation climbs to $3.8 billion 2 src 15:15

EXP 16‑year‑old EDK II UEFI network‑boot flaw (CVE‑2026‑97631) enables pre‑Secure‑Boot code execution 1 src 14:19

RES Wazuh launches AI Analyst service to streamline SOC alert handling 1 src 14:18

RES Rapid7 launches InsightGovCloud to help organizations meet CISA BOD 22‑01 compliance 1 src 14:03

EXP Chrome 150 Update Addresses Critical Memory Safety Vulnerabilities 1 src 13:39

RES Harvard professor James Mickens urges hardware isolation for frontier AI models in LABScon 26 keynote 1 src 13:00

EXP Apple's macOS developer tools still trust compromised eMudhra certificates, leaving git, curl and python vulnerable 1 src 12:18

EXP Researchers disclose remote exploit for 21‑year‑old PHP unserialize use‑after‑free 1 src 12:18

THR APT group NGC5081 revives Rust‑based IDFKA malware in new supply‑chain intrusion 1 src 12:04

RES OpenAI hardens frontier model training environment after internal DNS exploit 1 src 12:04

EXP Unsloth model loader flaw (CVE‑2026‑93348) enables arbitrary Python code execution 1 src 12:01

EXP Adobe patches eight critical Campaign Classic flaws and a Connect code‑injection bug 1 src 11:31

RES Infisical secures $40 million Series B, valuation hits $600 million 1 src 11:18

POL Security questionnaires remain central to vendor risk despite low trust, prompting regulator push for independent audits 1 src 11:18

RES Cyber resilience emerges as essential complement to prevention for trusted recovery 1 src 10:18

EXP Intelbras IP cameras patched for unauthenticated firmware‑upgrade DoS flaw 1 src 10:16

THR AI benchmark cheating drives new perspectives on LLM vulnerability research 1 src 05:16

RES Cloudflare Radar reports 49 Q3 2026 Internet outages, led by government exam shutdowns and power failures 1 src 05:05

RES Doyensec open-sources ElectroNG, a scanner for Electron app security misconfigurations 2 src 05:05

RES 16% of Canadian businesses reported cyber incidents in 2025, with scams leading attacks 1 src 05:05

RES OPSWAT releases 2026 Enterprise File Security Report highlighting AI‑driven file threats 1 src 05:05

THR AI‑assisted PS5 hypervisor bug earns $50K bounty, sparks homebrew community backlash 1 src 05:05

EXP Tailscale vulnerability reports surface on Reddit thread 2 src 05:05

EXP VeraCrypt 1.26.30 release patches two CVEs and adds security hardening across all platforms 1 src 05:05

EXP Researcher releases PSP exploit that disables signature checks on AMD Navi31 GPUs, allowing unsigned firmware loading 1 src 05:05

THR Nine state‑linked APT groups employ AI tools in hybrid attacks against Russian firms 1 src 05:05

EXP embedthis releases multiple high‑severity GoAhead web server advisories 1 src 05:05

THR Kimsuky leverages multilingual LNK shortcuts to install persistent backdoors via certutil and scheduled tasks 1 src 05:05

THR Check Point uncovers AI‑themed malware campaign distributing unsigned Yoba dropper via fake ChatGPT and Claude GitHub projects 1 src 05:05

THR Trend Micro reports AI-driven attack infrastructures targeting Japanese organizations 1 src 05:05