SecurityWeek (1 hour ago)
The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub.
Read the full story on SecurityWeek.
What makes them safer – and where they fall short
Keeping secrets is difficult in an open world, but we’ve done it before and must do it again
Two critical RCE vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively tracked as PHP2Shell, have been successfully exploited in the wild.
Cybersecurity researchers have disclosed a Microsoft 365 campaign that has been observed leveraging an adversary-in-the-middle (AitM) relay to capture sign-in sessions and then replay the stolen tokens to break into email accounts at 79 organizations.
An automated campaign is using stolen GitHub tokens to plant workflows that print a repository’s secrets into its GitHub Actions logs, which the attackers then download before deleting the runs.
Microsoft Entra ID is retiring custom CSS positioning in company branding to stop phishing. Custom placement reverts to default layouts, but core logos and colors remain.
An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution.
Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks.
Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.
Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.
71 active sources
26 Turkish · 45 English
All sources
