Cybersecurity
News
n8n patches high-severity sandbox escape allowing OS command execution
n8n fixed a high-severity sandbox escape (CVSS 8.7) in versions 2.31.5 and 2.32.1 that could allow authenticated workflow editors to execute OS commands on...
News
East Asia hackers target Middle East govts with new Telegram malware
A previously undocumented East Asian threat actor is targeting Middle East government agencies with three new malware families: TELESHIM, MIXEDKEY, and BINDCLOAK.The TELESHIM backdoor...
News
SourTrade Malware Built in Browser Using Bun Runtime
SourTrade malvertising campaign targets cryptocurrency investors by assembling malware inside the victim's browser using a legitimate Bun runtime.It operates since late 2024, impersonating TradingView,...
News
Critical Fastjson flaw lets attackers hijack Spring Boot apps
A critical remote code execution vulnerability (CVE-2026-16723, CVSS 9.0) affects Alibaba's Fastjson library versions 1.2.68 through 1.2.83 when used in Spring Boot applications.Security firms...
News
BlueNoroff uses typosquatted Zoom domains in phishing
North Korean threat actor BlueNoroff is running ClickFix-style campaigns using typosquatted Zoom and Microsoft Teams domains.The group operates an active phishing kit designed to...
News
Claude Cowork bug lets AI break sandbox, access Mac files
Researchers at Accomplish AI discovered a sandbox escape vulnerability in Anthropic's Claude Cowork, affecting approximately 500,000 macOS users.The flaw, named SharedRoot, allowed an agent...
News
New Linux bug grants root access via snap-confine flaw
Security researchers at Qualys disclosed a high-severity local privilege escalation flaw (CVE-2026-8933) in snap-confine, affecting default Ubuntu Desktop installations.An unprivileged attacker can exploit two...
News
CISOs Earn Strategic Influence by Enabling Fast, Visible AI Adoption
76% of employees now use AI at work, up from 55% the previous year, according to McKinsey's State of AI report
Security teams that build...
Latest news
Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.
Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...
Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached
Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...
CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...
