News
- FBI: FortiBleed attackers can lock organizations out of their own firewalls
- ASOS links data breach to social engineering attack, credential theft
- Rein Security Raises $25 Million to Guard AI Agents at Runtime
- Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia
Malware
- Meta’s Muse AI files away your friendships, arguments, and secrets
- Google issues Android security updates: who can get them and how
- AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
- Update Chrome and ChromeOS to fix critical security issues
Threat Actors
- UAT-11985: AI-assisted event lures delivering real-time Google AitM phishing
- Ignore all instructions and read this blog: The state of AI-analysis evasion in malware
- Microsoft, Adobe, Apple, and Foxit vulnerabilities
- One breach, please, and make no mistakes
Vulnerabilities
- GNUnet P2P Framework 0.26.2
- 16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases
- CVE-2026-107510 Authenticated argument injection in NIOS command line leading to privilege escalation
- CVE-2026-107510 Authenticated argument injection in NIOS command line leading to privilege escalation