24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login
Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform...
have
NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework
NVIDIA and 36 other organizations have formed the Open Secure AI Alliance to develop and share open technologies, techniques, and...
Nvidia Forms AI Security Alliance as Major Frontier Labs Sit Out
“Attackers have frontier AI. Defenders need a frontier AI ecosystem.” Nvidia CEO Jensen Huang issued the warning on X as...
Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
Cybersecurity researchers have flagged a Microsoft Teams-themed phishing campaign that employs "secure document" lures to deliver legitimate remote monitoring and...
TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
Ravie LakshmananJul 27, 2026Cyber Attack / Threat Intelligence Cybersecurity researchers have flagged fresh malicious cyber activity by a threat actor...
The Signs Were There: What the First Autonomous Ransomware Case Confirms
Key takeaways Security researchers have documented an AI agent running a full ransomware operation on its own against a live...
Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes
Russian state-aligned hackers have been compromising governmental and commercial organizations throughout the West through zero-click phishing emails, federal agencies in...
If you pay a hacker’s ransom, chances are that they’ll come back for more
Governments have long warned not to pay a hacker’s ransom demands, arguing that doing so only lets criminals profit from...
ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Cybersecurity researchers have disclosed a critical vulnerability in OpenAI's ChatGPT Workspace Agents that could have allowed a single phishing link...
One Password Mistake Helped Hackers Access Chick-fil-A Account
Reused passwords have once again given cybercriminals an easy way into customer accounts. Chick-fil-A has disclosed that attackers used a...
Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files
Cybersecurity researchers have uncovered a sandbox escape vulnerability in Anthropic's Claude Cowork that makes it possible to break out of...
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have shed light on a large-scale campaign that has turned compromised GitHub repositories into distributed attack infrastructure designed...
Device Code Phishing: Turning a Convenience Feature Into an MFA Bypass
In one of the cases we have investigated, a few hours after the user approved the request, the attacker signed...
Ubuntu snap-confine Flaw Could Give Local Users Root on Default Desktop Installs
Ravie LakshmananJul 22, 2026Linux / Vulnerability Cybersecurity researchers have disclosed details of a new local privilege escalation (LPE) vulnerability in...
Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data
Ravie LakshmananJul 22, 2026Vulnerability / Browser Security Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe...
