Dark Reading (1 hour ago)
CVE-2026-104935, a high-severity authentication bypass + RCE vulnerability, was only partially discovered and patched in July, leaving an opening for threat actors to capitalize on.
Read the full story on Dark Reading.
Spoiler: They’re already running rampant across the US.
Both Switchzilla and CISA sound the alarm
Incident hitting 700 supermarkets exploited outdated devices exposed to the Internet.
A sprawling cybercrime marketplace supplied cloud infrastructure and phishing kits that helped fuel more than 1 billion phishing messages worldwide.
We’ve all gotten a scam text about a nonexistent parking ticket or a fake package delivery, but hopefully you’ll start seeing fewer of them. Microsoft says it helped dismantle a marketplace for scammers sending phishing messages like those around the world.
Xbow earned a $250K bug bounty and all the AI model got was a lousy t-shirt
A bug in Claude Code Desktop’s preview pane can allow adversaries to quietly steal credentials from developers, including SSH private keys, AWS credentials, and Claude 0Auth tokens.
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs.
The Democratic People’s Republic of Korea (DPRK) is trying to get insight into its own war effort in Ukraine, through simple reply-baiting phishing attacks.
72 active sources
27 Turkish · 45 English
All sources
