Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Spain's Ministry of Science partially shut down its IT systems after a threat actor claimed to have exploited a critical IDOR vulnerability to obtain admin-level access and exfiltrate sensitive personal records, passport scans, and financial data.
Substack disclosed that a hacker accessed its internal systems in October 2025, exposing user email addresses, phone numbers, and metadata, though passwords and payment data were not compromised.
The Everest ransomware group claimed to have exfiltrated 90GB of internal data from systems linked to Polycom, now owned by HP Inc., including engineering build environments, source code, and technical documentation for the RMX and RealPresence conferencing platforms. Evidence suggests the data originated in legacy Polycom environments from 2017–2019, predating HP's acquisition, though it remains unclear when the systems were accessed. HP Inc. has not confirmed the breach.
Tenable researchers uncovered LookOut, two flaws in Google Looker that allow attackers with developer rights to run remote code, steal secrets, and exfiltrate the internal MySQL database via an auth bypass and error-based SQL injection. Google patched cloud-hosted instances in September 2025, but self-hosted deployments must update, though no active exploitation has been detected.
Hacktivist collective Chronus claims to have leaked 2.3TB of data from at least 25 Mexican government bodies, potentially exposing personal and healthcare records of 36 million citizens. Mexico's ATDT argues the dump repackages old breaches from obsolete third‑party systems, not fresh sensitive data.
A cross-tenant vulnerability (CVE-2025-13292) discovered in Google Cloud's Apigee allowed attackers to chain SSRF via the GKE metadata endpoint, to escalate privileges via Dataflow JAR poisoning, and to abuse autoscaling to access analytics data across all Apigee tenants, including plaintext OAuth access tokens. The attack exploited shared cross-tenant metadata buckets lacking tenant-specific path isolation and overly permissive service account permissions within tenant projects. Organizations using managed multi-tenant cloud services should audit tenant isolation boundaries, restrict access to metadata endpoints from workloads, and ensure that shared infrastructure components enforce strict per-tenant scoping.
Robinhood built SERA (Secure Enhanced Remote Approval), an internal platform that replaces VPN-dependent access approvals with passkey-based biometric authentication, enabling engineers to securely approve requests from any device. The system uses trusted enrollment on corporate devices to bootstrap credentials and then enables flexible remote approvals with tamper-evident audit trails, reducing approval times by over 20%. This approach demonstrates how organizations can reduce friction in security incident response and off-hours workflows without weakening authentication guarantees.
AWS is a highly distributed system, which can lead to delays as changes propagate across the system. This is known as eventual consistency. This window can be exploited to recreate deleted or disabled AWS access keys within a nearly four-second window while the changes propagate. Disallow the principal from accessing via an SCP, wait 4 seconds, and then use the standard deletion process to prevent an attacker from exploiting eventual consistency. Other IAM operations, such as policy attachment and detachment, and role assumption, share this vulnerability.
claude-code-transcripts is a Python CLI tool that converts Claude Code sessions into detailed, shareable HTML pages capturing prompts, tool calls, thinking traces, and commits. The tool supports both local Claude Code sessions and Claude Code for web via a reverse-engineered private API. It is useful for maintaining audit trails of AI-assisted development decisions and evaluating prompting strategies across coding agent workflows.
Orion provides an AI-driven data protection platform that maps how sensitive information moves across an organization, detects risky or abnormal data flows in real time, and automatically prevents leaks and insider-driven data loss across modern cloud environments.
Spicedb is an open-source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data.
Following user backlash, Mozilla announced that it will be adding a toggle to delay current and future AI features. Along with this toggle, there will be an AI control panel where users can selectively enable or disable specific features. Features will begin enabled in the AI control panel until users choose to disable them if they do not use the “Block AI Enhancements” toggle.
Apple has announced a new feature for select iPhones and cellular-enabled iPads that limits the precision of location data shared with a customer's cell carrier. Applications that a user has granted precise location data and emergency calls will still have access to the user's precise location.
Ransomware gang Nitrogen shipped an ESXi encryptor with a fatal bug that corrupted its own Curve25519 public key, making decryption mathematically impossible even if victims pay. The slipup turns a profit-driven campaign into pure destruction: criminals earn nothing while organizations are left with unrecoverable hypervisors and costly rebuilds.
Solana-based DeFi platform Step Finance lost $40 million in digital assets after hackers compromised executives' devices and drained multiple treasury wallets.
Sudo's sole maintainer, Todd C. Miller, has been seeking sponsorship since losing corporate backing in February 2024, raising concerns about the long-term sustainability of a foundational Unix/Linux security utility.
Security researchers warn that OpenClaw's booming “skill” marketplace has become a major attack surface.
Sponsored
Set it and forget it? Not when it comes to securing Google Workspace. Configuration drift, admin sprawl, and risky integrations creep in over time, opening up security gaps that attackers love to exploit. This checklist from Nudge Security [5] will help you catch common mistakes and keep your security tight.
Extortion group ShinyHunters stole roughly 14 million records from Panera Bread by compromising a Microsoft Entra SSO code, then leaked a 760GB archive after failed ransom demands. The dump includes 5.1 million unique customer email addresses, along with names, addresses, and phone numbers, creating significant downstream risk of phishing, credential stuffing, and identity-based attacks that can extend far beyond Panera's ecosystem.
Researchers at Socket Security identified a new set of compromised packages on the OpenVSX marketplace that appear to be infected with the GlassWorm malware. The malware targets macOS users and harvests data from browsers, wallet extensions and wallet apps, macOS keychains, Apple Notes databases, Safari cookies, developer secrets, and documents from the local filesystem. The researchers note that the extensions operated legitimately for two years prior to infection, so it is possible that the developer was compromised.
A security researcher discovered a vulnerability in Instagram that exposed links to private photos and captions in the HTML source code of some private profiles. The researcher found that, in their testing, 28% of the accounts they created or had access to exhibited this issue. Meta responded to the researcher, stating that the issue was caused by a CDN caching problem and has been fixed, but the researcher contends that it's a backend authorization issue.
Job seekers looking to transition to cybersecurity should begin by identifying the role that is right for them, finding a career mentor to guide them, joining learning communities, and developing the required skills. They should then build their online presence and experience by volunteering with the security team at their current job, telling their network about their career transition, building an online portfolio, and polishing their LinkedIn profile. Finally, it's time to apply for the job and prepare for interviews.
Self-replicating “prompt worms” are emerging as a serious security risk as OpenClaw's autonomous AI agents interact on Moltbook, install unvetted skills, and access private data. Researchers have already found hidden prompt-injection attacks, leaked API keys, and misconfigured databases that could allow attackers to silently execute malicious instructions. With more capable local models coming, today's OpenClaw ecosystem looks like a high-stakes dry run for much larger, harder-to-stop AI agent outbreaks.
This post shares results from a 60-day audit of Outline's open-source wiki, uncovering seven vulnerabilities ranging from SSRF and CSRF to insecure design and an IDOR in event logging. The authors highlight strong baseline security in Outline's API design, but also note that subtle framework behaviors and outdated dependencies led to real-world issues, including a potential admin account takeover. One finding was uniquely caught by an AI security platform, yet most AI-reported issues were persuasive false positives that consumed 40 hours of validation. The conclusion emphasizes that AI tools are promising assistants, but human expertise remains essential for high‑quality security reviews.
GhostKatz extracts LSASS credentials directly from physical memory by abusing signed vulnerable kernel drivers with `MmMapIoSpace` read primitives, bypassing traditional user-mode detection mechanisms like EDR hooks on LSASS. Designed as a modular Cobalt Strike BOF, it currently ships with exploits for Toshiba TPwSav and TechPowerUp ThrottleStop drivers and supports extensibility for custom driver research via `utils.c`. Tested across Windows 10, Server 2012 R2 through 2022, the tool supports both logonpasswords and wdigest credential dumping modes, though operators should note the inherent BSOD risk when leveraging vulnerable kernel drivers in production environments.
RapidFort provides an automated software supply chain security platform that analyzes and hardens containers, eliminates unused and vulnerable components, and delivers curated, near-zero-CVE base images to reduce attack surface before production deployment.
OpenMalleableC2 is a framework-agnostic library that implements Cobalt Strike's Malleable C2 profile for HTTP transformations.
Cryptographer Matthew Green analyzes a class action lawsuit alleging Meta can secretly read all WhatsApp messages, concluding the claims lack solid evidence and that mass-scale decryption backdoors would be detectable through reverse engineering of the closed-source client app. While acknowledging legitimate privacy concerns around WhatsApp's metadata collection, backup encryption complexity, and new AI-powered "Private Processing" features, Green argues these known limitations are far removed from the deliberate universal plaintext access alleged in the complaint. Security professionals who remain uncomfortable trusting WhatsApp's closed-source implementation are advised to use Signal, which offers open-source code and reproducible builds for independent verification.
Docker patched a critical “DockerDash” vulnerability in its Ask Gordon AI assistant that allowed attackers to hide malicious instructions in Docker image metadata labels, leading to remote code execution and data theft via MCP tools. The flaw exploited meta-context injection and breached trust boundaries among the AI, MCP gateway, and local tools, and is fixed in Docker Desktop 4.50.0.
In 2019, two Coalfire consultants, legally hired to test an Iowa courthouse's security, were arrested for burglary after a county sheriff overrode officers who had verified their contract. Their prosecution dragged on for months, damaging careers and client relationships, until Dallas County agreed to a $600,000 settlement seven years later.
Sponsored
AuditBoard's free virtual event features risk experts from EY, Kimberly-Clark, and OpenAI. Get up to 4 free CPE credits as you learn
APT28 is actively exploiting CVE-2026-21509, a Microsoft Office security feature-bypass zero-day, in phishing campaigns targeting Ukrainian government agencies and EU organizations.
Coinbase confirmed an insider breach in December 2025, where a contractor improperly accessed data of approximately 30 customers.
GitHub is exploring options, including disabling pull requests and requiring AI disclosure, after open-source maintainers reported that the vast majority of AI-generated contributions are low-quality work that increases review burden and erodes community trust.
Sponsored
Join 1Password for a practical look at how IT can take control of their time and their SaaS landscape.
Notepad++ confirmed that a suspected Chinese state-sponsored group compromised its shared hosting provider from June through December 2025, selectively redirecting update traffic to serve malicious installers by exploiting insufficient update verification controls. The attackers maintained persistent access through stolen internal service credentials even after losing direct server access in September 2025. Notepad++ has since migrated hosting providers and hardened its update mechanism with certificate and signature verification in v8.8.9, with full XMLDSig enforcement expected in v8.9.2.
A newly discovered Windows malware campaign combines the Pulsar RAT with Stealerv37, using Donut loader shellcode injection into explorer.exe to operate entirely in memory while evading traditional antivirus detection. The attack chain begins with an obfuscated batch file in %APPDATA%\Microsoft that leverages PowerShell for fileless execution, deploying capabilities including webcam/microphone surveillance, clipboard hijacking for crypto wallet address swapping, and credential theft from browsers, VPNs, and gaming platforms. Notably, attackers actively engage victims via a live chat window while simultaneously exfiltrating stolen data via Discord and Telegram, maintaining persistence through a watchdog mechanism and defensive evasion via Task Manager and UAC disabling.
A critical 1-click RCE vulnerability (CVE-2026-25253) discovered in OpenClaw (formerly Moltbot), the popular open-source AI assistant with over 100,000 users, chains three logic flaws: unsanitized `gatewayUrl` query parameter acceptance, automatic gateway reconnection, and auth token leakage in the WebSocket handshake. The exploit bypasses localhost network restrictions via Cross-Site WebSocket Hijacking due to missing origin validation, then uses the stolen operator-scoped token to programmatically disable user confirmation prompts and container sandboxing before executing arbitrary commands on the host machine. Organizations deploying OpenClaw should immediately upgrade past v2026.1.24-1, rotate all auth tokens, and treat this as a broader warning about the attack surface introduced by AI agents granted extensive system permissions.
Google Threat Intelligence Group disrupted the IPIDEA residential proxy network—believed to be the world's largest—by taking legal action against C2 domains, sharing intelligence with partners, and enforcing removals of Google Play Protect, reducing the available device pool by millions. The investigation revealed IPIDEA operated through 14+ proxy and VPN brands with four SDK families (PacketSDK, CastarSDK, HexSDK, and EarnSDK) sharing a two-tier C2 infrastructure and approximately 7,400 Tier Two servers, with over 550 threat groups from China, DPRK, Iran, and Russia observed using IPIDEA exit nodes in a single week. Organizations should monitor for published IOCs, block known IPIDEA-associated domains, and audit environments for traffic patterns consistent with residential proxy abuse, particularly from applications that monetize bandwidth.
Mobile carriers can silently ask modern phones to compute and send exact GPS coordinates using low-level RRLP and LPP protocols, bypassing iOS and Android permission systems entirely. This happens in the baseband processor, which talks directly to cell towers and the GPS chip, so operating system privacy settings, VPNs, and app-level toggles offer no protection. Law enforcement, intelligence agencies, and even data brokers have leveraged this capability for real-time tracking, often in murky legal territory. Apple's new C1 modem and iOS 26 add some visibility and consent controls on the iPhone 16e, but billions of other devices remain always-trackable whenever a SIM is active.
Gabriel Biondo, a former CISO and pentester, introduces a practical macOS hardening series grounded in defense-in-depth principles, emphasizing that layered security controls across network, application, secrets, and operational layers dramatically reduce compromise likelihood compared to any single control. The series outlines a pragmatic threat modeling approach focused on identifying assets, threat agents, and value-vs-cost tradeoffs rather than over-engineered frameworks, with upcoming installments covering DNS filtering, browser compartmentalization, MFA/passkeys, and compensative controls. Security professionals are reminded that the goal is not invulnerability but raising the cost of attack above that of alternative targets while maintaining system usability.
Reko is a general-purpose, open-source decompiler for machine code binaries that supports multiple processor architectures and executable file formats with minimal user intervention. Built on .NET 6.0, it provides command-line, Windows GUI, and ASP.NET front ends for analyzing and decompiling binary executables. Licensed under GPL, it is particularly useful for reverse engineering and binary analysis workflows where legal rights to decompile are established.
Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs, and Suricata alerts.
Indurex provides an AI-powered platform that secures cyber-physical systems by ingesting OT and IT data, correlating industrial and network signals, and unifying the context.
A stack overflow vulnerability discovered in Sony's PS VR2 kernel-level USB authentication code allows arbitrary firmware downgrading by exploiting an unchecked `memcpy` in `usb_auth_set_auth1_data` that blindly trusts the USB request buffer length beyond the 64-byte structure size. Repeatedly triggering the overflow on device connection forces the PS VR2 into a hidden recovery mode running initial firmware v01.10, from which any firmware version can be installed despite no eFuse-based downgrade protection being present. The exploit tool "vr2jb" has been publicly released. Researchers recommend downgrading to v06.00 as a stepping stone toward a full jailbreak that could unlock features like eye tracking and haptics on PC.
ICE-reporting service StopICE was compromised to send frightening texts falsely claiming user data was handed to authorities and smearing its developer. StopICE's team traced the attack to a US border agent's personal server. It says no usernames, addresses, or GPS data are stored. The service will use “bait” data to identify the alleged attackers.
The US Treasury Department announced that it was canceling all contracts it holds with Booz Allen Hamilton after their failure to prevent one of its contractors from stealing and leaking tax records years ago. The decision specifically deals with the case of a contractor, Charles Littlejohn, who leaked tax returns of more than 400k US taxpayers between 2018 and 2020. Littlejohn used a private server to siphon the tax returns of President Donald Trump, Jeff Bezos, Elon Musk, and other super-rich Americans.