-
Google has announced a $250,000 reward, called the “Root-in-Cloud” program, for researchers who can demonstrate complete administrative takeover of arbitrary Google Cloud projects or organizations without prior access. Google announced the …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
IBM has disclosed seven vulnerabilities in Langflow OSS, including critical flaws such as authentication bypass and code injection that attackers can exploit remotely without credentials. The bulletin addresses Langflow versions 1.0.0 through 1.12.8 an…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A campaign by the BITTER threat group that delivers a custom remote access trojan (RAT) called PapRAT to South Asian organizations. FortiGuard attributes the activity to the group with high confidence, based on lure filenames, command-and-control (C2) …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Google Dismantles XCPE Botnet That Infected 1.3 Million Android TV Devices With Preinstalled Malware
Google and industry partners have dismantled the XCPE botnet. This firmware-level backdoor enrolled more than 1.3 million Android set-top boxes. Google Threat Intelligence Group (GTIG) assesses with high confidence that Android OEM and ODM Videostrong …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
WorkOS reported unauthorized access to an internal sales application on October 30, 2026. The investigation found that attackers used an AI-assisted offensive security framework to automate reconnaissance and exploitation. The company’s ongoing i…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Anthropic has launched beta support for running endpoint detection and response (EDR) sensors within Claude Cowork’s local virtual machine. This enhancement gives enterprise security teams visibility into AI agent activity that traditional host-b…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Older iPhones that store cryptocurrency recovery phrases are at a continuous security risk due to unpatchable BootROM vulnerabilities, even if the devices are wiped and kept in airplane mode. While attackers require physical access to exploit this vuln…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A phishing campaign impersonating OpenAI is using disposable WordPress websites and live attacker oversight to steal payment card details and potentially capture one-time passwords. Fraudulent ChatGPT Plus billing emails warn that subscription payments…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers compromised emergency alert applications in Ukraine and Russia, distributing fabricated nuclear and radiation warnings as officials sought to reassure residents that no corresponding emergency existed. Ukraine reported interference late on Nove…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C
Hackers have disrupted refrigeration systems at several ICA and Coop supermarkets across Sweden, destroying food and prompting temporary closures. One store manager reported finding a freezer at 55°C, which highlights the physical consequences of attac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶