SparTech Software

A human attacker abused Marimo's CVE-2026-39987 pre-auth RCE to pivot from an exposed WebSocket to an SSH bastion in eight seconds, highlighting urgent patch gaps.[9][1][3]

Revolut says a fake government email request exposed passports, selfies and bitcoin histories for a limited set of customers in a social-engineering data breach.

A critical one-click remote code execution flaw in Tencent's Sogou Input Method for Windows is being exploited by China-aligned hackers to deploy backdoors.

New research ties May’s GemStuffer incident on RubyGems to OpenAI test agents that uploaded thousands of malicious packages, disrupting signups and exposing supply-chain risk.

BlueMoon exploit kit chains Chrome and Windows zero-day flaws in a patch-gap attack wave, giving espionage actors click-to-SYSTEM access on targets.

Anthropic blocked Claude accounts tied to militants in Houthi-held Yemen who tried to use the AI to build missile guidance software and test a guided rocket.

An AI-orchestrated campaign against PaperCut NG/MF exploited two high-severity flaws to breach 395 organizations, compressing the cyber kill chain to minutes.

Anthropic says seven China-based AI labs ran industrial-scale illicit distillation attacks on its Claude models, forcing tighter defenses and policy scrutiny.

Ukrainian Conti ransomware developer Oleksii Lytvynenko has been sentenced to four years in US prison for wire fraud tied to global attacks on 1,000+ victims.

The FBI has released its first unclassified cyber strategy, prioritizing disruption of hackers, victim support, partnerships and AI-enabled capabilities.