BLAHALLA
RSS
  1. Hackers Exploit AWS CloudTrail and Google Cloud Logging to Hide Attacks and Steal Logs
    gbhackers.com ·
  2. GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks
    thehackernews.com ·
  3. Max severity Ivanti Sentry vulnerability now exploited in attacks
    www.bleepingcomputer.com ·
  4. GitLab Patches Multiple Vulnerabilities Allowing Account Takeover
    gbhackers.com ·
  5. China-Linked JDY Botnet Hijacks 1,500+ IoT Devices for Rapid Exploits
    gbhackers.com ·
  6. PoC Exploit Released for Linux Kernel Guest-to-Host Escape Vulnerability
    gbhackers.com ·
  7. Ivanti Command Injection Flaw Exploited After PoC Code Release
    gbhackers.com ·
  8. Anthropic’s Claude Fable 5 AI Model Jailbroken for Stack Exploit Creation
    gbhackers.com ·
  9. Microsoft C.E.O. Satya Nadella Says ‘Everyone Is a Stakeholder’ in A.I.
    www.nytimes.com ·
  10. GitHub finally pulls the plug on automatic install script execution for npm
    www.csoonline.com ·
  11. Chinese, N. Korean Threat Groups Build on Asia-Pacific Success
    www.darkreading.com ·
  12. Smashing Security podcast #471: This AI worm just rewrote its own rules
    grahamcluley.com ·
  13. Trump Muses About Government Taking a Piece of A.I. Companies
    www.nytimes.com ·
  14. Path traversal flaw in AI dev platform Langflow exploited in attacks
    www.bleepingcomputer.com ·
  15. CISA Rewrites Federal Patching Requirements for AI Threat Era
    www.darkreading.com ·
  16. Britain Is Weighing a Social Media Ban for Children. How Did It Get Here?
    www.nytimes.com ·
  17. The ‘Miasma’ worm source code briefly leaked on GitHub
    www.bleepingcomputer.com ·
  18. CISA tells agencies to patch smarter, not harder — foreshadowing broader industry practice
    www.csoonline.com ·
  19. Ivanti patches critical Sentry flaws that lead to full device takeover
    www.csoonline.com ·
  20. Bug Bounty Research Triggers ServiceNow Security Alert
    www.darkreading.com ·
  21. GitHub announces npm security changes to tackle supply-chain attacks
    www.bleepingcomputer.com ·
  22. AI Risk Worries Insurers and Businesses Alike
    www.darkreading.com ·
  23. Pre-auth XXE → HTTP SSRF on ArubaOS 8.13.2 closed as "theoretical / no valid PoC" despite TCP pcap, sshd localhost log, and internal port scan — documenting for community review
    netacoding.com ·
  24. Oracle PeopleSoft servers hacked in ShinyHunters data theft attacks
    www.bleepingcomputer.com ·
  25. Antonio Gracias, Elon Musk’s Friend, Is Set to Reap Billions From SpaceX’s IPO
    www.nytimes.com ·
  26. Nightmare-Eclipse Drops Yet Another Microsoft Exploit, RoguePlanet
    www.darkreading.com ·
  27. China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber Reconnaissance
    thehackernews.com ·
  28. Turn specs into evals for any agent with ASSERT
    commandline.microsoft.com ·
  29. CVE-2026-0269 PAN-OS: Denial of Service (DoS) in Tunnel Traffic Processing (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  30. CVE-2026-0270 Cortex XSOAR: Path Traversal Vulnerability (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  31. PAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION (Severity: INFORMATIONAL)
    security.paloaltonetworks.com ·
  32. CVE-2026-0266 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability in the Web Interface (Severity: LOW)
    security.paloaltonetworks.com ·
  33. CVE-2026-0267 GlobalProtect App: Information Exposure Vulnerability on macOS (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  34. CVE-2026-0272 PAN-OS: Privilege Escalation (PE) Vulnerability in the Command Line Interface (CLI) (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  35. PAN-SA-2026-0008 Chromium: Monthly Vulnerability Update (June 2026) (Severity: HIGH)
    security.paloaltonetworks.com ·
  36. CVE-2026-0271 Prisma Access Agent: Local Privilege Escalation by Authorized Users (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  37. CVE-2026-0268 Prisma Access Agent: Local Authenticated VPN Enforcement Bypass on Linux (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  38. CVE-2026-0274 Cortex XSOAR: Improper Validation of Credentials in CommvaultSecurityIQ integration (Severity: HIGH)
    security.paloaltonetworks.com ·
  39. CVE-2026-0273 PAN-OS: Authenticated Admin Command Injection Vulnerability via CLI or Web UI (Severity: MEDIUM)
    security.paloaltonetworks.com ·
  40. We post-trained a model for offensive security instead of teaching it to refuse
    www.argusred.com ·
  41. They Tried To Catch a Child Predator on a Livestream. They Trapped Themselves Instead.
    www.nytimes.com ·
  42. Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
    thehackernews.com ·
  43. Unpatched Langflow Flaw CVE-2026-5027 Exploited for Unauthenticated RCE
    thehackernews.com ·
  44. China-linked JDY botnet expands targeting of U.S. military networks
    www.bleepingcomputer.com ·
  45. SpaceX’s IPO Will Turn 4,400 Employees Into Millionaires
    www.nytimes.com ·
  46. June Patch Tuesday marks a ‘new normal’ with over 200 CVEs, 32 rated ‘critical’
    www.csoonline.com ·
  47. CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
    thehackernews.com ·
  48. The 5 Best Practices for Secure Identity Verification
    www.bleepingcomputer.com ·
  49. Who Runs the Ransomware Group ‘The Gentlemen?’
    krebsonsecurity.com ·
  50. Infostealers Turn Millions of Devices Into Credential Theft Machines
    www.securityweek.com ·