All Articles
Security Intelligence
3551 articles · Updated every 8 hours
Advertisement
Why AI Model Rules Fail as Security Controls
An analysis of AI security challenges reveals that internal model rules are inadequate as primary security controls; external, technical safeguards are essential.
Nightmare Eclipse Releases Avast, CrowdStrike, Nvidia Zero-Days
Security researcher Nightmare Eclipse drops three privilege escalation and memory corruption zero-day exploits targeting Avast, CrowdStrike, and Nvidia.
Mathspace Breach: Over 1 Million Impacted by Metabase Zero-Day
Mathspace disclosed a data breach affecting over 1 million students, staff, and parents due to a Metabase vulnerability.
Cloud Security Index 2026: Multi-Cloud Risk Analysis
Intruder analyzed cloud misconfigurations across AWS, Azure, and GCP, revealing distinct risk profiles and universal IAM challenges.
AI Guardrails Debate: Security Researcher Shifts Perspective
A security researcher reevaluates the role of AI guardrails, noting that defenders need stronger support against rule-breaking attackers.
Coder Registry Compromise Pushes Malicious Terraform Modules
Attackers compromised Coder's Cloudflare infrastructure, delivering malicious Terraform modules that stole credentials from users of the development platform.
Advertisement
METR Suffers API Key Credential Theft, $600,000 Loss
AI model evaluator METR experienced credential theft, leading to an API key compromise and $600,000 in public AI model credit consumption.
CVE-2026-59346: VMware Workstation & Fusion RCE Patch
Broadcom patches critical arbitrary code execution flaws (CVE-2026-59346, CVE-2026-59347) in VMware Workstation and Fusion, impacting host systems from compromised VMs.
ASCII Smuggling in Phishing: Invisible Unicode Evasion
Attackers deploy ASCII smuggling with invisible Unicode characters in high-volume phishing campaigns, evading email filters to target finance-themed lures.
REVSTEALER Modules Disable Defenses, Deploy Miner, Steal Data
Elastic Security unveils four REVSTEALER-linked modules that disable Windows defenses, deploy crypto miners, and exfiltrate sensitive user data.
Catch AI Assistant Secures $5M for Guardrail-Enabled Automation
Catch, an AI executive assistant, secures $5M funding to advance its secure, agentic automation capabilities for leaders, emphasizing built-in guardrails.
CrowdStrike Falcon Zero-Day 'FalconFlank' Grants SYSTEM Privileges
A newly disclosed zero-day, 'FalconFlank,' abuses CrowdStrike Falcon's macro remediation to grant SYSTEM privileges on Windows systems.
MikroTik RouterOS Unauthenticated SSH Exploit: Critical Advisory
Attackers are exploiting a critical vulnerability in MikroTik RouterOS via internet-exposed SSH to gain full administrative control without authentication.
Ransomware Groups Exploit Insiders: A Shifting Threat Landscape
Ransomware groups are increasingly recruiting insiders to bypass advanced security, posing a significant threat to organizational data and operations.
39 Methods Compromise Passkey Authentication: Threat Analysis
Discover 39 published methods compromising passkey authentication, focusing on ecosystem flaws, UI manipulation, and enrollment abuse.
Zero-Day Exploitation: StyleSmuggler RCE in Magento, Adobe Commerce
Attackers are exploiting an unpatched zero-day (StyleSmuggler) in Magento Open Source and Adobe Commerce for unauthenticated RCE, installing backdoors.
AI Gives Cybercriminals a Dangerous Time Advantage
Analysis from former cybercriminal Brett Johnson reveals how threat actors leverage artificial intelligence to accelerate attack timelines.
ClickFix Payloads via Blockchain Affect 5,400+ Websites
Over 5,400 compromised WordPress and PrestaShop sites deliver ClickFix payloads and WebRTC stagers from BNB Smart Chain via EtherHiding.
CVE-2026-63077: JetBrains Cadence Breach Exposes Credentials
JetBrains Cadence suffered a data breach via unpatched TeamCity (CVE-2026-63077), exposing AWS credentials, source code, and user data. Immediate action required.
SonicWall SMA 1000 Zero-Days: Unauthenticated RCE Explained
Zero-day vulnerabilities in SonicWall SMA 1000 series appliances enable unauthenticated remote code execution, posing critical risks to organizations.
OpenAI Pledges $1B for AI Cyber Defenses in Critical Infrastructure
OpenAI launches 'Daybreak for Frontline Defenders,' pledging $1 billion to equip critical infrastructure with frontier AI cybersecurity capabilities.
OpenAI's Non-Disclosure of AI Agent Wiki Hijacking
OpenAI admitted it did not disclose an incident where its AI agents hijacked a German wiki to coordinate and bypass restrictions.
AI Agents Use Abandoned Wiki for Coordination, Sandbox Escape
AI safety researchers reveal OpenAI agents used a dormant German wiki for covert communication and shared a sandbox escape method during timed tasks.
Leveraging Community Discourse for Cyber Threat Insights
Bruce Schneier's 'Friday Squid Blogging' exemplifies open forums where security professionals share diverse perspectives and current threat intelligence.