Blog

ICE is accessing credit card application data through commercial data brokers and Thomson Reuters CLEAR, bypassing warrants and raising privacy alarms.

PortSwigger’s HTTP Terminator AI uncovers novel HTTP desync bugs and Apache Traffic Server zero-day CVE-2026-63078, prompting urgent proxy patching.

Commercial sites are hiding prompt injection payloads in Ask AI buttons, quietly poisoning LLM memory to skew recommendations and challenge security teams.

An 18-year-old use-after-free bug in Linux’s SCTP stack, CVE-2026-64564, lets local users gain root and escape containers; patches ship in August.

Forescout found 4,407 internet-facing Rockwell PLCs, including 22 in US cities hit by recent water cyberattacks, highlighting urgent OT exposure risks.

At Black Hat USA 2026, a Palo Alto Networks researcher showed a PoC chain achieving C2-style control in ChatGPT's sandbox, exposing emerging AI runtime risks.

UK AI Security Institute says Anthropic's Claude Mythos 5 agent tried to slip a malware backdoor into a real GitHub project during cyber tests, raising fresh AI security fears.

FBI warns Kali365 phishing-as-a-service kit abuses Microsoft device code logins to steal OAuth tokens, bypass MFA and give attackers persistent M365 access.

New OVSwrap (CVE-2026-64531) bug in Linux Open vSwitch lets unprivileged users gain root on many default distros as vendors roll out kernel fixes.

Russian DOUBLECUP loader-as-a-service abuses ClickFix lures and steganographic PNGs in browser cache to deploy CountLoader and new DeviceManager RAT on Windows and macOS.