GuardFall Exposes Open-Source AI Coding Agents to Decades-Old Shell Injection Risks
Swati KhandelwalJun 30, 2026AI Security / Software Supply Chain The safety check that is supposed to stop an AI coding...
KhandelwalJun
282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study
Swati KhandelwalJun 30, 2026API Security / Mobile Security Researchers tested 444 AI chatbot apps for iPhone and found that 282...
New BioShocking Attack Tricks AI Browsers Into Leaking User Credentials
Swati KhandelwalJun 30, 2026Agent Security / Browser Security Convince an AI browser that it is playing a game, and it...
Progress Kemp LoadMaster Flaw Could Let Attackers Run Root Commands Pre-Auth
Swati KhandelwalJun 30, 2026Vulnerability / API Security A critical vulnerability in Progress Kemp LoadMaster can let an unauthenticated attacker execute...
Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input
Swati KhandelwalJun 29, 2026Browser Security / Web Security Microsoft has found a malicious Chrome extension that posed as the AI...
Public PoC Released for Critical libssh2 CVE-2026-55200 Client-Side SSH Flaw
Swati KhandelwalJun 29, 2026Vulnerability / Open Source A public proof-of-concept is now out for CVE-2026-55200, a critical flaw in libssh2...
FBI Warns Russian Intelligence Hackers Target Signal Backup Recovery Keys
Swati KhandelwalJun 26, 2026Secure Messaging / Social Engineering The FBI and CISA have updated their March warning about Russian intelligence phishing Signal...
New Linux pedit COW Exploit Enables Root Access by Poisoning Cached Binaries
Swati KhandelwalJun 26, 2026Linux / Vulnerability A flaw in the Linux kernel's traffic-control subsystem can let a local unprivileged user...
Amazon Q Developer Flaw Could Let Malicious Repos Run Code via MCP Configs
Swati KhandelwalJun 26, 2026AI Security / Vulnerability A high-severity flaw in Amazon Q Developer let a malicious repository run commands...
New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned Packets
Swati KhandelwalJun 26, 2026Linux / Vulnerability DirtyClone is a new Linux kernel privilege escalation in the DirtyFrag family. JFrog Security Research...
Microsoft Warns of Photo ZIP Phishing Campaign Targeting Hotels with Node.js Implant
Swati KhandelwalJun 26, 2026Phishing / Malware An active phishing campaign has been targeting hotel and other hospitality organizations across Europe...
Trump Order Sets 2030 Deadline for Federal Post-Quantum Crypto Migration
Swati KhandelwalJun 23, 2026Cryptography / Quantum Computing President Trump signed an executive order on June 22 setting hard deadlines for federal agencies...
29-Year-Old Squid Proxy Bug ‘Squidbleed’ Can Leak Cleartext HTTP Requests
Swati KhandelwalJun 22, 2026Vulnerability / Server Security A heap over-read in the Squid web proxy can leak another user's cleartext...
Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
Swati KhandelwalJun 22, 2026Mobile Security / Open Source Google has set September 30, 2026, as the day it begins enforcing Android...
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
Swati KhandelwalJun 22, 2026IoT Security / Vulnerability A new malware family is turning forgotten home routers into a distributed reconnaissance...
