52
1
Ruby on Rails RCE (github.com/rails)
2
An Angry Spark, or a Triangle in Disguise? (medium.com/billmarczak)
2
Antares: Open Weight AI Models for Vulnerability Localization (cisco.com)
1
One Month of Ecosystem Security Engineering (thephp.foundation)
2
Hawkish GOP lawmaker Don Bacon says he was hacked by Russia (politico.com)
3
Mapping AI-Enabled Cyber Threats: Insights from the LLM ATT&CK Navigator (anthropic.com)
1
Atomdrift is open-source malware detection for the software supply chain (atomdrift.org)
3
CIFSwitch: A non-universal Linux local root vulnerability (heyitsas.im)
3
California issues state of emergency after toxic leak threatens 40k residents (france24.com)
2
Read Trump's unsigned AI executive order (politico.com)
1
Microsoft AntiSSRF (github.com/microsoft)
1
LUKSbox – Store sensitive files in the cloud (penthertz.com)
2
NBC orders 'Wordle' game show hosted by Savannah Guthrie (cnn.com)
1
JDownloader Got Hacked (jdownloader.org)
1
Unpacking Russian-Iranian Private-Sector Cyber Connections (margin.re)
3
Oracle switches to monthly security updates (oracle.com)
3
Repatriated Scammers Are a Security Risk, Says Kenyan Government (commsrisk.com)
169
Period tracking app, Flo, found to be selling user data to Meta (femtechdesigndesk.substack.com)
2
Mystery Around Venezuelan Cyberattack Deepens, with New Highly Destructive Wiper (zetter-zeroday.com)
2
GitHub Is Unreachable in Kazakhstan (tengrinews.kz)
2
Cyber agencies share fresh advice to defend against China-linked covert networks (ncsc.gov.uk)
1
Lotus Wiper: a new threat targeting the energy and utilities sector (securelist.com)
3
Florida Man Working as Ransomware Negotiator Pleads Guilty to Ransomware Attacks (justice.gov)
1
A New Chapter for Ruby Central (rubycentral.org)
93
Codex Hacked a Samsung TV (calif.io)
1
Predator Spyware's iOS Kernel Exploitation Engine: Pac Bypass, Neon R/W and More (jamf.com)
4
Our response to the Axios developer tool compromise (openai.com)
4
Tesla Disables the FSD Used Illegally in over 100k Cars (autoevolution.com)
1
DPRK Malware Modularity: Diversity and Functional Specialization (domaintools.com)
1
Army approves M111, first new lethal hand grenade since 1968 (army.mil)
8
Scientists have found an alarming environmental impact of data centers (cnn.com)
1
Commission responds to cyber-attack on its Europa web platform (europa.eu)
1
CECbot: A TV box botnet that grabs the remote and maps the house (github.com/deepfield)
1
Remote Pre-Auth Buffer Overflow in GNU Inetutils Telnetd (lists.gnu.org)
1
Built-in VPN coming to Firefox 149 (blog.mozilla.org)
179
Office.eu launches as Europe's sovereign office platform (office.eu)
2
CrackArmor: Critical AppArmor Flaws Enable Local Privilege Escalation to Root (qualys.com)
3
Injectable "satellite livers" could offer alternative to liver transplantation (news.mit.edu)
3
White House Unveils President Trump's Cyber Strategy for America (whitehouse.gov)
1
FBI investigating 'suspicious' cyber activity on system holding wiretaps (abcnews.com)
3
China's new 5-year plan calls for AI throughout its economy, tech breakthroughs (reuters.com)
2
OpenAI admits defense deal 'looked opportunistic and sloppy' amid backlash (cnbc.com)
8
Ubuntu 26.04 ends a 40-year old sudo tradition (omgubuntu.co.uk)
1
Disrupting the Gridtide Global Cyber Espionage Campaign (cloud.google.com)
2
AI-augmented threat actor accesses FortiGate devices at scale (amazon.com)
2
IcedID malware developer fakes his own death to escape the FBI (risky.biz)
1
Employee Monitoring and SimpleHelp Software Abused in Ransomware Operations (huntress.com)
4
Right-to-Compute Laws Spread Across the US, as Electricity Bills Skyrocket (gizmodo.com)
1
Nitrogen Ransomware: ESXi malware has a bug (coveware.com)
2
European and allied cybersecurity strategies shift from defence to offence (bindinghook.com)
1
Julius: open-source LLM Service Fingerprinting (praetorian.com)
1
Gov't to notify people of possible data leaks, not just confirmed cases (joins.com)
3
A LinkedIn Job Offer Tried to Install Malware on My Machine (codecrank.ai)
1
Malicious Extension Bot (infosec.exchange)
3
The abandoned airport being transformed into a $30B sustainable city (cnn.com)
2
Hit squad recruiter for Sweden's Foxtrot criminal network arrested in Iraq (thenationalnews.com)
1
The Limits of Binary Interoperability (randomoracle.io)
11
Trump administration removes three spyware-linked executives from sanctions list (reuters.com)
6
America's work-from-home capitals are in a sorry state (economist.com)
3
SOAPwn: Pwning .NET Framework Applications Through HTTP Client Proxies and WSDL (watchtowr.com)
2
Japan teen arrested for alleged ChatGPT-assisted cyberattacks (nhk.or.jp)
8
$2B Counter-Strike 2 crash exposes a legal black hole (theconversation.com)
1
New OWASP Top (owasp.org)
2
State-Sponsored Remote Wipe Tactics Targeting Android Devices (genians.co.kr)
1
Spoofed numbers blocked in crackdown on scammers (gov.uk)
2
Analysis of NGate malware campaign (NFC relay) (cert.pl)
1
The ZeroAccess Developer and His Windows Kernel-Mode Debugger (r136a1.dev)
57
Czech police forced to turn off facial recognition cameras at the Prague airport (edri.org)
2
AFP cracked a criminal's crypto wallet (afp.gov.au)
1
A hacking gang held Italy's political elites to ransom (politico.eu)
1
Teams: Automatically update your work location via your organization's Wi-Fi (microsoft.com)
2
ZeroDisco: Attackers Exploit Cisco SNMP Vulnerability to Deploy Rootkits (trendmicro.com)
1
Securing the Future: Changes to Internet Explorer Mode in Microsoft Edge (microsoftedge.github.io)
1
Top Russian defense boss tries to lift sanctions, spills own secrets instead (kyivindependent.com)
2
Crates.io: Malicious crates faster_log and async_println (rust-lang.org)
2
Singapore Became Obsessed by Shade (bbc.com)
2
New Olympic calendar likely because of climate change (bbc.com)
33
Teen suspect surrenders in 2023 Las Vegas casino cyberattack case (casino.org)
3
Inboxfuscation: Because Rules Are Meant to Be Broken (permiso.io)
32
Qantas is cutting executive bonuses after data breach (flightglobal.com)
2
Turkmenistan turned internet censorship into a business (torproject.org)
1
Nevada Governor's Office says state offices 'will likely be closed' Tuesday (carsonnow.org)
1
Detecting CVE-2025-43300: A Deep Dive into Apple's DNG Processing Vulnerability (msuiche.com)
1
Oregon Man Charged in 'Rapper Bot' DDoS Service (krebsonsecurity.com)
3
Windows 11 Latest Security Update Is Causing SSD Failures (wccftech.com)
1
Belgium Targets Internet Archive's Open Library in Site Blocking Order (torrentfreak.com)
2
HBO Max to aggressively crack down on password sharing (ghacks.net)
3
Swarm of jellyfish shuts nuclear power plant in France (theguardian.com)
1
China is using cyber attribution to pressure Taiwan (bindinghook.com)
16
Lovense: The Company That Lies to Security Researchers (bobdahacker.com)
2
Amnban Files: Inside Iran's Cyber-Espionage Factory Targeting Global Airlines (narimangharib.com)
2
How Military Insignia Revealed Russia's Hidden Sigint Network (checkfirst.network)
1
Golden DMSA: What Is DMSA Authentication Bypass? (semperis.com)
2
SMM callout vulnerabilities identified in Gigabyte UEFI firmware (cert.org)
3
State Secrets for Sale: More Leaks from the Chinese Hack-for-Hire Industry (spycloud.com)
1
New NightEagle North American Apt Group [pdf] (github.com/reddrip7)
4
Interpol releases new information on globalization of scam centres (interpol.int)
2
Pakistani freelancers building cracking websites for stealer-delivery (intrinsec.com)
1