BLAHALLA
RSS
  1. Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data
    www.securityweek.com ·
  2. Critical Palo Alto VPN bug now exploited by Qilin ransomware gang
    www.bleepingcomputer.com ·
  3. AsyncAPI Supply Chain Attack Deploys Miasma Backdoor Through Trusted npm Workflows
    gbhackers.com ·
  4. Clover Health Investments Discloses Data Breach
    www.securityweek.com ·
  5. Microsoft shares manual fix for WSUS sync delays and timeouts
    www.bleepingcomputer.com ·
  6. When Listening to Music Was a Team Sport
    www.nytimes.com ·
  7. WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
    thehackernews.com ·
  8. Hackers Exploit SonicWall SMA Zero-Days to Gain Root Access and Deploy ORANGETAIL Webshell
    gbhackers.com ·
  9. Exploitation of ServiceNow Vulnerability Seen Days After Disclosure
    www.securityweek.com ·
  10. Iran-Linked APT42 Uses AI-Assisted Phishing and TAMECAT Backdoor to Target Defense Officials
    gbhackers.com ·
  11. Zimbra Update Patches Critical Vulnerabilities
    www.securityweek.com ·
  12. Abbott Confirms Cyberattack After Unauthorized Access to Cancer Diagnostics Systems
    gbhackers.com ·
  13. Windows LegacyHive zero-day flaw gets free, unofficial patches
    www.bleepingcomputer.com ·
  14. Linux Kernel Team Publishes 440 CVE Security Advisories Within 24 Hours
    gbhackers.com ·
  15. New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack
    thehackernews.com ·
  16. AgentBaiting Uses Fake AI Skills and MCP Servers to Deliver SmartLoader and StealC Malware
    gbhackers.com ·
  17. Critical Gitea Flaw Lets Public-Only Tokens Write to Private Repositories and Trigger Actions Workflows
    gbhackers.com ·
  18. White hat hacker Park Chan-am zeros in on the AI era’s key security challenges
    www.csoonline.com ·
  19. Context bombing heralds a new AI era of deceptive defense
    www.csoonline.com ·
  20. Fileless Stealer and PureRAT Raid Browser Passwords, Telegram Sessions, and Crypto Wallets
    gbhackers.com ·
  21. Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution
    thehackernews.com ·
  22. European Password Manager Passwork Shares Codebase and Updates With FSTEC-Certified Russian Firm
    gbhackers.com ·
  23. Bit2Watt Attack Turns AI Data Centers Into Cyber-Physical Threats to Local Power Grids
    gbhackers.com ·
  24. Paidwork Data Breach Exposes 23.3 Million Accounts, Banking Data and bcrypt Password Hashes
    gbhackers.com ·
  25. HOLLOWGRAPH Malware Turns Microsoft 365 Calendar Events Into Covert Command-and-Control Channels
    gbhackers.com ·
  26. Hackers Hide C2 Traffic Inside Telegram While Targeting Middle East Governments
    gbhackers.com ·
  27. Hackers Exploit Palo Alto PAN-OS Flaw to Deploy Qilin Ransomware
    gbhackers.com ·
  28. Estée Lauder discloses data breach via Oracle E-Business flaw
    www.bleepingcomputer.com ·
  29. SonicWall SMA1000 flaws exploited as zero-days to push custom malware
    www.bleepingcomputer.com ·
  30. Hackers steal $23.7 million in crypto from Ostium in off-chain attack
    www.bleepingcomputer.com ·
  31. 'WP2Shell' Opens Millions of WordPress Sites to Remote Takeover
    www.darkreading.com ·
  32. Cursor, Codex, Gemini CLI, Antigravity hit by sandbox escapes
    www.bleepingcomputer.com ·
  33. JadePuffer agentic attacks now target AI model data with ransomware
    www.bleepingcomputer.com ·
  34. Remediating Vulnerabilities With LLMs: Inside Ivanti's Automation Push
    www.darkreading.com ·
  35. ServiceNow’s sandbox escape RCE hole now exploited in the wild
    www.csoonline.com ·
  36. 25 Years After Code Red: What the Worm Era Can Teach Us About AI Security
    www.darkreading.com ·
  37. CISOs Feel the Heat Over AI Risk
    www.darkreading.com ·
  38. Attackers Combo Up Evasion Tactics for BEC Phishing
    www.darkreading.com ·
  39. FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
    thehackernews.com ·
  40. The 12 Best Identity Threat Detection & Response (ITDR) Solutions, Compared and Priced (2026)
    gbhackers.com ·
  41. New HollowGraph malware uses Microsoft Graph for stealthy C2 comms
    www.bleepingcomputer.com ·
  42. Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign
    thehackernews.com ·
  43. AWS Billion-Dollar Software Bug Explained
    www.techrepublic.com ·
  44. Judge Temporarily Pauses Paramount-Warner Bros. Deal
    www.nytimes.com ·
  45. Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software
    www.securityweek.com ·
  46. AI adoption and business acceleration are changing the expectations of technology risk management
    www.csoonline.com ·
  47. HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050
    thehackernews.com ·
  48. SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
    www.securityweek.com ·
  49. How Google’s A.I. Search Is Imperiling the Open Web
    www.nytimes.com ·
  50. ‘Vibecoded’ Apps Are Flooding Apple’s App Store
    www.nytimes.com ·