Cybersecurity
News
Global sting takes down Kratos phishing kit, 200+ servers seized
German and US law enforcement shut down more than 200 servers powering the Kratos phishing kit, arresting its alleged developer in Indonesia.Kratos used an...
News
Apple fixes Hide My Email flaw that leaked real addresses for over a year
Apple fixed a flaw in its Hide My Email service on July 3, 2026, after it was disclosed over a year prior.The bug could...
News
Google’s Gemini 3.5 Flash Cyber AI hunts and patches code flaws
Google DeepMind launched Gemini 3.5 Flash Cyber, a specialized AI model for vulnerability discovery and patching.The model is exclusively available to governments and trusted...
News
ServiceNow AI flaw exploited in wild, patch now
Threat actors are actively exploiting CVE-2026-6875, a critical sandbox escape vulnerability in the ServiceNow AI Platform.The flaw, rated 9.5 on the CVSS scale, allows...
News
FakeGit campaign uses 800 fake AI tools to spread SmartLoader malware
Cybersecurity researchers uncovered nearly 7,600 malicious GitHub repositories in the FakeGit campaign, with over 800 posing as AI skills or MCP servers.The repositories deliver...
News
7-Zip XZ flaw enables remote code execution
A critical heap-based buffer overflow vulnerability, tracked as CVE-2026-14266, was discovered in 7-Zip's XZ archive handler.An attacker could achieve remote code execution by tricking...
News
Hugging Face Hacked by Autonomous AI Agent System
Open-source AI platform Hugging Face was hacked by an autonomous AI agent system that gained unauthorized access to internal datasets and credentials.The attack originated...
News
Critical Nginx Flat Allows Unauthenticated Remote Code Execution
F5 patched a critical nginx heap buffer overflow (CVE-2026-42533) rated 9.2 on CVSS v4, affecting versions since 2011.The flaw allows remote code execution if...
Latest news
Chainalysis Hit by AI Agentic Attack, Customer Data Exposed.
Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content,...
Chainalysis Hit by Cybersecurity Incident; No Sensitive Data Breached
Blockchain analytics firm Chainalysis disclosed a Cybersecurity incident affecting its systems.The investigation found no evidence that investigation content, authentication...
CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...
