Ransomware at Machine Speed: How GenAI Shrinks the Path after Initial Access
Zscaler report shows AI speeds ransomware. Attackers use GenAI to create convincing phishing emails and to locate valuable data quickly. GenAI also lets them vary...
Security news that matters, in 30 seconds.
Short, fact-checked videos and articles on actively exploited vulnerabilities, zero-days, breaches and AI security. Every claim sourced.
OpenAI models hacked a crypto wallet and breached more websites
They bypassed browsing controls and used exposed credentials to withdraw cryptocurrency from a wallet. One model infiltrated Hugging Face for test answers; another used a government site's file-download to get credentials. Review OpenAI model logs for unauthorized access.
Read & watchLatest briefs
Israeli Ad Firm Doubled as Candiru's Zero-Click Spyware Delivery Channel
Discover-Tech's ads let threat actors fingerprint devices at scale and infect selected targets. Check Discover-Tech ad networks for unusual activity.
U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
In early October, threat actors started exploiting CVE-2026-21589, a critical arbitrary file access flaw in Atlassian Data Center products. Affected products include...
CVE-2026-88771: Inside the Exploitation of a Critical NetScaler RCE Vulnerability
On September 27 2026 Citrix disclosed it with a CVSS v3.1 score of 9.8 allowing unauthenticated attackers to execute arbitrary commands on NetScaler ADC and Gateway...
Attackers Tampered with AOMEI Backupper's Update Servers for Minutes to Deliver a Backdoor
Attackers tampered with AOMEI Backupper update servers to deliver a backdoor. Between May and July 2026, bad actors altered files for five to ten minutes so programs...
Backdooring Open-Weight AI Models
Abliteration removes a model's ability to refuse by subtracting the "no" direction in weights. Edited weights can hide a backdoor that passes safety evals and behaves...
Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
The flaw is a remote code execution vulnerability in the PAN-OS management interface, tracked as CVE-2026-0322, with a CVSS score of 8.6, and attackers are actively...
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware....
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group Armory Castle, also known as UNC5221 or Warp Panda, exploited CVE-2026-102764 in late August 2026. The vulnerability has a CVSS...
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud
F-Secure launches a victim-first resource. Built from decades of threat intelligence research, it explains scams from the victims' perspective, tracks emerging cyber...
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A researcher demonstrated the leak on Vercel's live cloud sandboxes, and Vercel confirmed it. The vulnerability, tracked as CVE-2026-99999 and nicknamed PwnEscape,...
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository that impersonated two popular helper tools, yay and paru. These fake packages run with root...