PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover
PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover Pierluigi Paganini September 04, 2026 PostGREShell (CVE-2026-6471) is a 12-year-old PostgreSQL flaw...
Blog
Using a VM to Contain an AI Agent
Using a VM to Contain an AI Agent It won’t work: My suspicion was that GPT 5.6-Cyber would succeed, but...
Nvidia-Hugging Face deal could require an enterprise AI rethink
Open source makes AI more accessible by lowering the barriers to experimentation and adoption, said Jon Carvill, senior vice president...
Macs don’t just do AI, they’re replacing the cloud for it
Basically, once you’ve invested in on-premises capacity, you can divert mundane AI tasks to those machines for processing — limiting...
Phishing Campaign Sends Millions of Emails Using Invisible Unicode to Evade Filters
Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of...
PostgreSQL Fixes 12-Year-Old Logical Decoding Flaw Enabling Replication-Role Code Execution
PostgreSQL has released updates to address a security flaw that allows an account with the REPLICATION attribute to run arbitrary...
New Ted Backdoor Hides Inside Victims’ Own HAProxy Builds to Intercept Web Traffic
A previously undocumented Linux toolkit has been found compiled directly into the trojanized HAProxy load balancers of two South Korean...
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Ravie LakshmananSep 04, 2026Vulnerability / Web Security Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms...
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Ravie LakshmananSep 04, 2026Vulnerability / Network Security Plex is urging users to update their instances to the latest version following...
Nvidia lets you build your own AI clusters locally with PAIR software
Nvidia has released a free tool that will enable users to build an AI inferencing cluster from disparate PCs on...
Bidding war for defunct Spirit Airlines’ employee data will not die
The destiny of Spirit Airline’s data is still undecided, months after the company sought bankruptcy protection. AI data company Micro1...
ICE Wants to Know Everyone Who Bought a Certain Green Beanie From REI in the Last 2 Years
Did you buy a beanie from REI recently? The Department of Homeland Security might be looking for you.New court filings...
Chinese Hackers Use AI Agents in Multi-Country Cyber Campaign
Chinese Hackers Use AI Agents in Multi-Country Cyber Campaign Pierluigi Paganini September 04, 2026 Hunt.io uncovered a Chinese-speaking campaign using...
Google fixes the sixth actively exploited Chrome zero-day of 2026
Google fixes the sixth actively exploited Chrome zero-day of 2026 Pierluigi Paganini September 04, 2026 Google patched 12 Chrome flaws,...
Dark Web Service Nexus Sells 153M+ Driver’s Licenses
Dark Web Service Nexus Sells 153M+ Driver’s Licenses Pierluigi Paganini September 04, 2026 FBI probes suspected breach at IDScan.net after...