Blog

Apiiro found 1,122 public Claude Code settings files containing passwords or keys, prompting developers to rotate credentials and review repositories.

SonicWall patched an exploited SonicOS SSL VPN flaw that can bypass SAML authentication and MFA when attackers possess alternate credentials.

Scammers are using AI-generated pet images to demand money from desperate owners, with threats and fake veterinary emergencies adding pressure to pay.

An OpenAI research model crafted raw packets and probed AWS services after a sandbox proxy failed, exposing new risks in AI containment.

US agencies warn that exposed refrigeration controllers are being hacked to alter temperatures, threatening food, blood supplies and industrial equipment.

Democrats’ takeover of Congress will put CISA cuts, AI security, cyber grants and information-sharing rules at the center of new oversight.

CISA added CVE-2024-27834 to its exploited-vulnerability catalog after a Russia-linked campaign used the patched Apple flaw to steal browser data.

APT29 used compromised websites and patched iOS, Android flaws to silently steal cookies, messages and credentials from users in Ukraine and Europe.

OpenAI says an upcoming cyber model found 948 Linux local privilege escalation flaws, generated patches and exploits, and cost $1.2 million to run.

Apple will check iCloud photos and files shared through public links for harmful content in OS 27.3, ending end-to-end encryption for those items.