News

A critical security vulnerability (CVE-2026-40965) has been discovered in the Cloud Foundry platform's User Account and Authentication (UAA) system, allowing unauthorized access to sensitive elliptic curve private keys through an API error. This flaw has a…

An urgent security warning has been issued regarding critical vulnerabilities in MariaDB, impacting multiple open-source database installations. The most severe issue, tracked as CVE-2026-49261, has a maximum CVSS score of 10.0, indicating potential remote…

The article discusses a significant data breach involving DentaQuest, a major dental benefits administrator, where the cybercrime group known as ShinyHunters leaked 234 GB of data. This breach affects an estimated 2.6 million individuals, with exposed data…

The 'Security Affairs Malware Newsletter Round 100' highlights a selection of significant articles and research focused on malware trends globally. Notable topics include malware utilizing Steam profiles for command and control operations, a Codex Remote UI…

The latest edition of the Security Affairs newsletter features critical updates on cybersecurity and vulnerabilities. Key highlights include: 1. U.S. CISA adds several new flaws to its Known Exploited Vulnerabilities catalog, including a critical SolarWinds…

The content discusses a severe security vulnerability in the Apache Cordova framework, specifically affecting the InAppBrowser plugin on iOS devices (CVE-2026-47430). This flaw allows untrusted web content to escape its secure environment, enabling…

Anthropic has updated its Claude Cowork platform, increasing short-term processing limits during a five-hour window for enterprise users. While this allows for enhanced operations, it does not increase the overall weekly quota, leading to criticism from…

Emphere, a cybersecurity startup based in Seattle, has raised $2.1 million in pre-seed funding from AI2 Incubator and Outsiders Fund to develop its AI-driven vulnerability remediation platform. Emphere's solution addresses vulnerabilities in software…

The recent detection of a significant software campaign targeting Python developers highlights vulnerabilities within the PyPI registry. This coordinated supply chain attack involved threat actors compromising multiple open-source packages by injecting…

1Password's recent security updates address two identified vulnerabilities (CVE-2024-42218 and CVE-2024-42219) following a disclosure by researcher Pablo Sabbatella. He reported a deviation from cryptographic best practices related to hardware tokens…

Alphabet has secured a $30 billion cloud computing agreement with SpaceX, effective from October 2026 to June 2029. Google will pay approximately $920 million monthly for access to 110,000 Nvidia GPUs, intended to support its Gemini Enterprise platform amid…

The page discusses a recent security vulnerability (CVE-2026-28318) associated with SolarWinds Serv-U, emphasizing the introduction of OpenAI's Lockdown Mode to combat prompt injection threats. This mode enhances data security by limiting network and agent…

Google has introduced Gemini Go, a lightweight application designed to replace the older Google Assistant Go framework, targeting entry-level devices with minimal system requirements. Gemini Go operates efficiently on Android Go smartphones with as little as…

The Browser Choice Alliance, including companies like Google and Opera, criticized Microsoft for using predatory tactics to promote its Edge browser over competitors. They issued an open letter demanding Microsoft stop invasive practices that hinder…

The article discusses Anthropic's deployment of engineers to assist the NSA in using its advanced AI model, Mythos, known for its cybersecurity capabilities. Approximately six engineers are reportedly embedded within the NSA to help with offensive…

The article discusses the newly implemented 'Lockdown Mode' for ChatGPT, which restricts the use of certain tools to prevent potential data exfiltration. This is part of a broader effort in cybersecurity to address vulnerabilities in artificial intelligence…

On June 5, 2026, the Miasma worm campaign targeted Microsoft's Azure GitHub organizations, leading to GitHub disabling 73 repositories across four organizations after a malicious commit was pushed to the Azure/durabletask repository via a compromised…

Opal Security has raised $23 million in a new funding round, bringing its total investment to $59 million, primarily to enhance its AI-native identity governance platform. The funding round was led by Greylock and Battery Ventures, with contributions from…

The article discusses how free applications are turning smart TVs into web-scraping proxies for AI, raising significant cybersecurity concerns. It highlights potential privacy risks and emphasizes the need for better security measures to safeguard users'…

The page discusses the addition of an actively exploited SolarWinds Serv-U DoS vulnerability to the CISA Known Exploited Vulnerabilities (KEV) catalog. It highlights the importance of patch management and vulnerability identification in cybersecurity…

A vulnerability discovered by security researcher Taylor Hornby in Zcash's Orchard privacy pool allows for the potential creation of counterfeit ZEC (Zcash) coins. The flaw, identified using Claude Opus 4.8, was present from the launch of Orchard in May 2022…

A recent report highlights the discovery of 21 zero-day vulnerabilities in FFmpeg by an AI agent, resulting in significant security concerns. Additionally, Google Chrome has patched a record 429 vulnerabilities. This showcases the growing role of AI in…

The article discusses a significant supply chain attack known as the "Miasma Worm," which has compromised 73 Microsoft GitHub repositories. This breach highlights vulnerabilities in software supply chains, emphasizing the need for improved cybersecurity…

A critical vulnerability (CVE-2026-20245) has been identified in Cisco Catalyst SD-WAN Manager, which is actively exploited and currently has no patch available. The issue raises significant concerns for network security and emphasizes the urgency for…

The article discusses the highly sophisticated PHANTOMPULSE malware, which targets digital financial platforms and is linked to North Korean cyber espionage. It highlights unique process injection techniques, advanced evasion strategies, and uses a…

Researcher Rasmus Moorats discovered a serious security flaw in the Creative Sound Blaster Katana V2X speaker, allowing it to be hacked over Bluetooth without authentication. The speaker's proprietary protocol, CTP, permits remote code execution, enabling…

In the U.S., cybercriminals are exploiting Internet-exposed Automatic Tank Gauge (ATG) systems at gas stations, prompting warnings from multiple federal agencies. These ATGs, critical for monitoring fuel and chemical storage, have been found vulnerable,…

The article discusses the emergence of two new variants of malware, IronWorm and Miasma Worm, that have targeted the npm (Node Package Manager) ecosystem through supply chain attacks. It highlights how these worms exploit vulnerabilities within software…

The Silent Ransom Group (SRG), also known as Luna Moth and UNC3753, is a cyber extortion group uncovered by Resecurity, which revealed their Fast Flux infrastructure targeting U.S. law firms and businesses. This group has been active since 2022 and focuses…

This report details a sophisticated Adversary-in-the-Middle (AiTM) credential-harvesting kit specifically targeting Microsoft 365 and Entra ID identities. The attack involves a three-to-five stage funnel process, beginning with a CAPTCHA gate to filter…

The blog post discusses security vulnerabilities in Anthropic's Claude Code GitHub Action, primarily related to how AI agents interact with CI/CD workflows. It highlights that unsecured processing of GitHub content can lead to exposure of sensitive…

CVE Lite CLI is an open-source lightweight command line security scanner focused on identifying vulnerabilities in npm, pnpm, and Yarn packages during JavaScript and Typescript software development. Developed by Sonu Kapoor, it addresses issues developers…

The article discusses the emergence of Android spyware known as Asin, which targets Arabic users through deceptive methods including fake news, PDF files, and applications that map wars. This phishing tool exploits geopolitical tensions and misinformation to…

The article discusses the impending threat of adaptive AI worms, described as 'viruses with wings and brains.' These autonomous entities will rapidly self-propagate by exploiting zero-day bugs and unpatched software vulnerabilities, posing a significant risk…