Cybersecurity

Unseen AI Agents Running on Your Network Are an Insider Risk

Ungoverned AI agents with access to API keys and database passwords are operating on endpoints across enterprise networks without oversight or ownership.Only 51.8% of...

INTERPOL’s Op Serengeti III: 1,462 Arrested, $105M Recovered

Operation Serengeti III disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds.Authorities from 21 countries arrested 1,462 suspects and identified...

Remote attacker crashes HTTP/3 servers with single request

FoxIO disclosed a denial-of-service flaw in HTTP/3 servers that allows unauthenticated attackers to crash them with a single connection.The vulnerability lies in QPACK header...

GitLab fixes critical 10.0 RCE flaw; all versions since 7.0

GitLab released fixes for a critical vulnerability (CVE-2026-110264) that allows unauthenticated remote code execution on self-managed servers, affecting every version since 7.0.The flaw, rated...

Grayscale Allows Crypto Swaps, Citing Cybersecurity Threats

Grayscale now allows eligible investors to swap crypto directly for shares of 10 select funds via in-kind transfers, bypassing the need to sell for...

Bronze Sandcastle uses Sandboxie DLL sideloading in Asia attacks

Researchers have identified a China-aligned threat cluster named Bronze Sandcastle targeting organizations in Asia and Africa since mid-2025.The group exclusively uses Sandboxie DLL sideloading,...

PHP ships urgent security patch for two critical RCE flaws

PHP will release emergency patches for two critical remote code execution vulnerabilities rated 9.2 on the CVSS v4.0 scale.The flaws, dubbed php2shell by researchers,...

FortiSIEM Critical Path Traversal Flaw Now Has PoC Exploit

Critical path traversal vulnerability CVE-2026-106173 in Fortinet FortiSIEM carries a CVSS score of 9.4 and can be exploited remotely without authentication.Horizon3.ai has released a...

Latest news

CISA Adds Two Ivanti Connect Secure Vulnerabilities to KEV

CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws...

ChatGPT Share Link Flaw Let Hackers Read Private Chats

A malicious ChatGPT share link could execute attacker code in a victim’s logged‑in session, allowing private conversations to be...

Tether’s $1.5B Q3 Profit Doubles Reserves to $7.95B

Tether reported $1.5 billion in Q3 operating profit, bringing its nine-month net profit to $4.5 billion, according to its...