A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices
A malicious SIM card can order the device it sits in to run commands of the attacker's choosing. On the...
attackers
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by...
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent Imports
Two security flaws in Paperclip could let attackers execute commands on a network server or a developer's computer. Paperclip is...
N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
Swati KhandelwalAug 03, 2026Vulnerability / Endpoint Security N-able said attackers exploited an authentication bypass in N-central to gain remote administrative...
Apple Fixes 194 Security Flaws Across iPhone, Mac and Other Devices
Apple has patched vulnerabilities that could give attackers root access, execute malicious code or expose protected data across iPhones, Macs...
Cursor Quietly Patches High-Severity Git Vulnerability After Seven-Month Delay
Opening a Git repository in a vulnerable version of Cursor could be enough to give attackers code execution on a...
Critical TeamCity Flaw Could Let Unauthenticated Attackers Execute Server Commands
JetBrains has patched a critical TeamCity vulnerability that could allow unauthenticated attackers to run operating system commands on exposed, self-hosted...
Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out
“Attackers have frontier AI. Defenders need a frontier AI ecosystem.” Nvidia CEO Jensen Huang issued the warning on X as...
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
Swati KhandelwalJul 25, 2026Vulnerability / Application Security Security firms ThreatBook and Imperva say attackers are targeting a critical flaw in...
Email threats changed after the Tycoon2FA take-down
The adaptation came in the form of using Microsoft Teams as a social engineering channel. Attackers established conversations to build...
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today,...
Microsoft Urges Windows 11 Users to Install Updates Within Three Days
Microsoft warns attackers are increasingly using AI to accelerate exploitation of newly disclosed vulnerabilities, shrinking the time organizations have to...
Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity
Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walking into corporate Salesforce environments without exploiting...
Top AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It
Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker's code on...
The Verification Step Is the New ATO Battleground in 2026
For years, account takeover (ATO) followed a predictable script. Attackers bought stolen credentials in bulk, ran them through automated tools,...