Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of...
Cybersecurity
Google Holds Back Gemini 3.5 Flash Cyber as CodeMender Enters Preview
Google has built a cybersecurity model capable of finding vulnerabilities, checking whether they can be exploited, and generating patches. Most...
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed...
Third-Party SDKs Raise Privacy Questions for Apps Marketed to U.S. Military
The biggest privacy risk on smartphones may not be the apps themselves, but the third-party code quietly running inside them....
New Data Shows Suno Breach Affected 55M Accounts
Suno’s latest unwanted release is a data breach affecting more than 55 million accounts. On July 20, 2026, Have I...
Why Modern SOCs Need Multi-Layered Detections
The cycle is over. For years, cybersecurity followed a familiar pattern: defenses improved, attackers adapted, and the back-and-forth continued. Today,...
Hackers Already Exploiting Newly Patched WordPress Flaws, Researchers Warn
Hackers are already exploiting two newly patched WordPress vulnerabilities, exposing millions of websites that have yet to install the latest...
Craneware Confirms Data Theft After Cyberattack, Investigations Underway
Hackers have stolen data from Craneware, a healthcare software provider serving thousands of U.S. hospitals and pharmacies, highlighting how cybercriminals...
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more than 800 pose as artificial intelligence (AI)...
AWS Billion-Dollar Software Bug Explained
A runaway cloud bill can trigger instant panic. For some Amazon Web Services (AWS) customers, that panic arrived in the...
SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines
Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting the Ruby ecosystem after three malicious gems...
23andMe Agrees to $18M Settlement With 43 States Over 2023 Data Breach
An $18 million settlement is the latest consequence of 23andMe’s 2023 data breach—and a reminder that some stolen information can...
Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security
Microsoft is reportedly preparing a new security product, called Project Perception, that would work similarly to Anthropic’s Mythos, deployed within...
Critical Zoom Flaw Could Let Attackers Take Over Windows Accounts
A critical flaw in Zoom’s Windows software could allow an unauthenticated attacker to remotely take over an account, giving organizations...
New FCC Proposal Pits Phone Privacy Against Fraud Prevention
The days of buying an anonymous burner phone in the U.S. could be numbered. The Federal Communications Commission has proposed...
