Search

LiteLLM Release Pipeline Compromise Exposes the Limits of Signed Builds
AI & ML LiteLLM Release Pipeline Compromise Exposes the Limits of Signed Builds

Attackers pushed credential-stealing malware through LiteLLM's release pipeline. A valid signature p...

Oct 22, 2026
Attackers Are Narrowing In on Remote, Zero-Click Flaws Within Days
AI & ML Attackers Are Narrowing In on Remote, Zero-Click Flaws Within Days

Rapid7's Q3 2026 data shows attackers weaponizing high-severity, remote, unauthenticated flaws in ab...

Oct 22, 2026
GitLab Regex Flaw Opens Unauthenticated Code Execution Path, Patches Ship for 7.0 and Later
AI & ML GitLab Regex Flaw Opens Unauthenticated Code Execution Path, Patches Ship for 7.0 and Later

GitLab's new patches close a critical regex compiler flaw that allows unauthenticated code execution...

Oct 22, 2026
PHP2Shell's Early Patch Leak Exposes Cracks in Coordinated Disclosure
AI & ML PHP2Shell's Early Patch Leak Exposes Cracks in Coordinated Disclosure

A premature PHP patch release let attackers study the fix before most users could update. Experts sa...

Oct 23, 2026
AI Notetakers Have Left the Meeting and Moved onto Your Wrist
AI & ML AI Notetakers Have Left the Meeting and Moved onto Your Wrist

AI notetakers now run on smartwatches and smart glasses, recording without a bot in the room. Here's...

Oct 23, 2026
After the Mythos Shock: Patching Fast Enough to Outpace AI Attackers
AI & ML After the Mythos Shock: Patching Fast Enough to Outpace AI Attackers

AI-driven exploits now move faster than most patch cycles. Security teams need automated triage, tig...

Oct 23, 2026
eMudhra Exits Global TLS Certificates After Intermediate CA Key Compromise
AI & ML eMudhra Exits Global TLS Certificates After Intermediate CA Key Compromise

eMudhra is leaving the global SSL/TLS certificate market after eight intermediate CA keys were compr...

Oct 23, 2026
What Meta's $25 Billion Data-Sharing Penalty Means for Enterprise Data Handling
AI & ML What Meta's $25 Billion Data-Sharing Penalty Means for Enterprise Data Handling

Meta's $25 billion penalty over third-party access to user data shows how quickly weak data controls...

Oct 23, 2026
Dual BIOS Gives Small Businesses a Faster Way Back from Firmware Failure
AI & ML Dual BIOS Gives Small Businesses a Faster Way Back from Firmware Failure

Firmware attacks and failed BIOS updates can brick a laptop for days. Dual BIOS designs fail over to...

Oct 23, 2026
Six Perfect-Score Oracle Flaws Land in October's 1,295-Bug Patch
AI & ML Six Perfect-Score Oracle Flaws Land in October's 1,295-Bug Patch

Oracle's October update fixes 1,295 vulnerabilities, six rated 10.0. All six need no login, only net...

Oct 23, 2026
Inside TAG-193's Evolving Espionage Toolkit Across Central Asia
AI & ML Inside TAG-193's Evolving Espionage Toolkit Across Central Asia

Exposed infrastructure reveals TAG-193's malware, delivery methods, and focus on Central Asian and C...

Oct 14, 2026
Russia's DPI Stack Turns Internet Throttling Into a Precision Tool
AI & ML Russia's DPI Stack Turns Internet Throttling Into a Precision Tool

Russia's throttling hardware and VPN protocol blocking are tightening control over traffic. Full iso...

Oct 15, 2026
Recorded Future Trades Its Somerville Laundromat Roots for Downtown Boston
Security Recorded Future Trades Its Somerville Laundromat Roots for Downtown Boston

Recorded Future moves its Boston headquarters from a former Somerville laundromat to Post Office Squ...

Oct 15, 2026
ARTEX-Driven Bank Intrusions Reveal Months of Hidden Prep in South Korea
AI & ML ARTEX-Driven Bank Intrusions Reveal Months of Hidden Prep in South Korea

Insikt Group traces TAG-217's AI-assisted bank attacks to August 2026, uncovering wallet-theft tooli...

Oct 16, 2026
Machine Identities Need Zero Standing Privilege, Not Just Better Rotation
AI & ML Machine Identities Need Zero Standing Privilege, Not Just Better Rotation

Rotating service account passwords only buys time. Moving machine identities toward zero standing pr...

Oct 19, 2026
ConnectWise Cloud Backup Credential Exposes 162 Microsoft 365 Tenants
AI & ML ConnectWise Cloud Backup Credential Exposes 162 Microsoft 365 Tenants

A compromised ConnectWise Cloud Backup credential opened Microsoft 365 tenants to attackers. Huntres...

Oct 19, 2026
Open-Weight Models Can Lose Their Safeguards Without Losing Accuracy
AI & ML Open-Weight Models Can Lose Their Safeguards Without Losing Accuracy

Fine-tuning or quantizing an open-weight model can strip its safety behavior while task accuracy hol...

Oct 19, 2026
F5's Three Critical NGINX Flaws Make Config Audits the First Step
AI & ML F5's Three Critical NGINX Flaws Make Config Audits the First Step

F5 shipped emergency NGINX patches for three critical flaws rated 9.2. Exposure hinges on configurat...

Oct 20, 2026
Why Embedded Devices Make Post-Quantum Migration Harder Than It Looks
AI & ML Why Embedded Devices Make Post-Quantum Migration Harder Than It Looks

Firmware lock-in, certification, and interoperability slow PQC migration for medical and OT devices....

Oct 20, 2026
Freezer Attack in France Exposes Where Cold-Chain Security Really Breaks
AI & ML Freezer Attack in France Exposes Where Cold-Chain Security Really Breaks

A remote attack warmed hundreds of French supermarket freezers. The lesson for operators: your refri...

Oct 20, 2026