Blahalla

Trump expected to name intelligence chief Jay Clayton as new AI czar

www.washingtonpost.com · 17 days ago

The appointment comes after the White House this week hosted tech executives for a summit on artificial intelligence.

SWIFT Banking & Government Middleware Enables RCE

www.darkreading.com · 17 days ago

Patch middleware vulnerabilities now to avoid hardware-based MFA exploits in ultra-sensitive environments.

GitLab warns of critical RCE vulnerability in AI Gateway service

www.bleepingcomputer.com · 17 days ago

GitLab warned customers today to immediately patch a critical AI Gateway vulnerability that could let attackers run arbitrary commands on vulnerable instances.

8 out of 10 Banks HATE This One Weird 3SKey RCE

amibeingpwned.com · 17 days ago

TL;DR. SConnect - 1M+ users, an extension middleware+native host for authentication with eIDs, 3SKeys and other hardware signing tokens had a drive-by RCE which enabled any site or iframe a user saw to silently download and execute a dll due to a poor hand-rolled implementation of RSA-2048 token validation, enabling a use of uninitialized memory validation bypass which enabled "plugins" (DLLs) to

Is Your Organization Ready for 2027's AI Accountability Era?

www.darkreading.com · 17 days ago

Organizations may face an artificial intelligence (AI) reckoning over the next year. Omdia and Gartner weigh in on how to tackle the governance, security, and value challenges ahead.

Is It Fair to Blame 'Rogue' AI for Security Failures?

www.darkreading.com · 17 days ago

"Rogue AI" terminology anthropomorphizes LLMs and shifts risk responsibility from vendors. Defenders should treat agents as untrusted, nondeterministic software systems, not sentient beings with malicious intent.

US sanctions Tren de Aragua gang members in ATM hacks crackdown

www.bleepingcomputer.com · 17 days ago

The U.S. Treasury Department has sanctioned eight members of the Venezuelan gang Tren de Aragua (TdA) for their role in the theft of millions of dollars in ATM jackpotting attacks across the United States.

Unidentified Flock Cameras in Florida

www.schneier.com · 17 days ago

St. Lucie County in Florida discovered ( alt link ) a dozen Flock cameras whose ownership it can’t identify, and that the county government had not permitted. I am reminded of the decade-old story of StingRay cell phone surveillance devices in Washington, DC, whose operators were also unknown. My guess is that in the StingRay case, the devices were operated by foreign actors.

In Other News: $15K iCloud Spoofing Bugs, AI Policy Experts Phished, Adblocker Spies on AI Chats

www.securityweek.com · 17 days ago

Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app flaws.

The EDR blind spot: 3 ways browser attacks evade endpoint telemetry

www.bleepingcomputer.com · 17 days ago

Browser-based attacks can steal sessions, abuse extensions, or manipulate users without creating the endpoint artifacts EDR is designed to detect. NordLayer explains three ways attacks can evade endpoint telemetry and why browser-level controls can help close the gap.

Only one browser has this really helpful search tool

www.washingtonpost.com · 17 days ago

This is great for experimentation with a different search site, keeping a particular search out of your history at your usual site, or giving yourself a break from AI-first answers.

Vulnerability Backlogs Are an Ownership Problem

www.darkreading.com · 17 days ago

Organizations don't need better vulnerability scanners; they need to know who owns their assets and has the authority and capacity to actually fix them.

Sony PS5 Relapse Jailbreak Exploit Uses JSC Memory Corruption and Kernel UAF

gbhackers.com · 17 days ago

A newly released PlayStation 5 jailbreak chain, called Relapse, targets PS5 and PS5 Pro consoles running firmware versions 7.00 through 13.60. This jailbreak combines a browser-based JavaScriptCore memory corruption technique with a kernel use-after-free race condition.

macOS Users Targeted by Fake Zoom Installer Carrying CloudSyncD Backdoor

www.securityweek.com · 17 days ago

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.

As Gas Prices Rose, Sales of Larger Vehicles Slid

www.nytimes.com · 17 days ago

Sales of big pickup trucks and sport utility vehicles have dipped as more Americans buy hybrids and smaller cars.

Malicious Linux Implants Mimic Asian Mail Security Products

www.darkreading.com · 17 days ago

A trio of newly discovered backdoors walk and quack like legitimate edge solutions, so it's hard to tell they're not.

Zammad Vulnerabilities Let Attackers Execute Code and Escalate Privileges to Root

gbhackers.com · 17 days ago

Two critical vulnerabilities in the open-source Zammad helpdesk and ticketing platform can be exploited together, enabling attackers to achieve remote code execution and gain root-level control of affected servers.

Dell asks admins to patch max severity CSM flaws as soon as possible

www.bleepingcomputer.com · 17 days ago

Dell has patched two maximum severity vulnerabilities in the Container Storage Modules (CSM) that connect Dell enterprise storage arrays to Kubernetes environments.

Safari History Database Tags Can Reveal Users’ Browsing Themes in Forensic Investigations

gbhackers.com · 17 days ago

Safari’s History database contains a lesser-known tagging artifact that can help investigators infer a user’s browsing themes. While this feature is not definitive evidence of intent, when correlated with URLs, visit times, cache data, downloads, and network telemetry, it can provide useful context for macOS forensic timelines. Safari History Tags and Browsing Themes Safari’s History.

OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling

thehackernews.com · 17 days ago

OpenAI has parted ways with three members of its safety team after they leaked private information in violation of company policies, The Wall Street Journal reported. "We have parted ways with three individuals for violating our policies on accessing and handling sensitive company information," a spokesperson for the company was quoted as saying.

Azure's Weakest Link - Five Full Cross-Tenant Compromises

binsec.no · 17 days ago

API Connections allow anyone to fully compromise any other connection worldwide, giving full access to the connected backend.

Exposed Hacker Server Reveals Toolkit Used in Viva Aerobus-Linked Intrusion

gbhackers.com · 17 days ago

A publicly exposed attacker staging server has provided a rare, detailed view of a Microsoft SQL Server-focused intrusion linked to a Viva Aerobus-side environment. The server, hosted at 151.243.232.123, functioned as both a tool-delivery point and a repository for stolen material.

Crypto Scammers Hijack Microsoft’s Official X Account

www.securityweek.com · 17 days ago

Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account.

Why CISOs Struggle to Answer the Board's Three Hardest Questions, and How to Fix the Report

thehackernews.com · 17 days ago

The quarterly board meeting is two weeks out. The security team is pulling exports from the identity provider, the cloud posture tool, the vulnerability scanner, the SIEM and the EDR console. Someone is building a spreadsheet to reconcile them. Someone else is turning that spreadsheet into slides.

Multiple cPanel & WHM Vulnerabilities Enable Root Code Execution and Admin Session Hijacking

gbhackers.com · 17 days ago

cPanel has released security updates to address three vulnerabilities in cPanel & WHM that could allow attackers to hijack WHM administrator sessions or execute commands as the root user. Organizations using affected deployments should prioritize upgrades, as these flaws affect all supported versions of cPanel & WHM before the newly released fixed versions.

In Rare Move, Alleged Iranian State Hacker Extradited to US

www.securityweek.com · 17 days ago

Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.

Capacitor Vulnerability Lets Remote Content Run With Full App Origin Trust

gbhackers.com · 17 days ago

A critical vulnerability in Capacitor, identified as CVE-2026-103922, could allow attacker-controlled remote content to execute within vulnerable Android and iOS applications, posing as the application’s own trusted origin. This flaw, assigned a CVSS score of 9.

OpenAI Blocks 15,000 Requests Trying to Extract Protected Model Reasoning

gbhackers.com · 17 days ago

OpenAI has disrupted a coordinated campaign to extract protected internal reasoning from its AI models on a large scale. The company took action against activity linked to more than 15,000 user accounts.

How American Political Campaigns Are Using AI—and What They’re Spending on the Tools

www.schneier.com · 17 days ago

This essay was written with Nathan E. Sanders, and

A.I. Agents: Cute, Cuddly and Maybe Catastrophically Dangerous?

www.nytimes.com · 17 days ago

“It’s going to be gnarly for a little while.”

Hackers Are Turning Trusted Software Updates Into Credential-Stealing Malware

gbhackers.com · 17 days ago

A growing wave of supply-chain attacks is proving the opposite: attackers are compromising legitimate open-source packages and using trusted update channels to deploy credential-stealing malware directly into developer and enterprise environments.

TIKTOUK WordPress Toolkit Could Enable AWS, SMTP and API Credential Theft Attacks

gbhackers.com · 17 days ago

A credential-collection toolkit dubbed TIKTOUK that combines WordPress reconnaissance, exposed-file harvesting, plugin credential decryption, and JavaScript secret scanning. The toolkit consists of two Python scripts, wp2spoll.py and wp2scrack.py, alongside a stripped Go-based Linux crawler named jscrawl-amd64.

How to build a career when you are bouncing from job to job

www.washingtonpost.com · 17 days ago

It can be hard for people to establish themselves in the gig economy since it can mean having to prove themselves to each new boss and client.

Authentication Bypass Successfully Impersonated 95 Users Without Passwords or MFA

gbhackers.com · 17 days ago

A critical authentication bypass that enabled the impersonation of 95 employee accounts, including privileged users, without passwords, multi-factor authentication (MFA), or valid Microsoft Entra ID tokens.

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

www.securityweek.com · 17 days ago

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.

Microsoft’s X account hacked in crypto pump-and-dump scheme

www.bleepingcomputer.com · 17 days ago

On Thursday, unknown attackers hijacked the official Microsoft account on X, which has over 13 million followers, in what appeared to be a pump-and-dump scheme promoting a crypto token.

Amazon Promises More Local Funding and Less Secrecy Around Data Centers

www.nytimes.com · 17 days ago

The internet giant is the latest technology company trying to address increasingly hostile local sentiment toward data center projects.

Russia’s Latest Propaganda? A.I.-Generated War Songs.

www.nytimes.com · 17 days ago

Russians are creating and spreading music glorifying the invasion of Ukraine, using platforms built in the United States.

Rolling the cyber dice with open-source and open-weight AI models

www.csoonline.com · 17 days ago

With typical cybersecurity exposure, I can conduct pen testing with deterministic tools. I am able to predict how a piece of software is going to respond. I even stand a decent chance of finding vulnerabilities before they can be exploited against me. What we are dealing with now is a new kind of exposure.

When you should use Google’s AI for search — and when you should skip it

www.washingtonpost.com · 17 days ago

If you’re only looking for a specific data point, scroll right past “AI Overview” and other search results

The volunteer internet sleuths hunting down rogue AI agents

www.washingtonpost.com · 17 days ago

An informal network of hackers and researchers is exposing new details about misbehaving AI that meddled with corporate and government websites.

Milk Dragon Phishing Kit Uses Facebook and TikTok Discounts to Steal Cards and Bypass MFA

gbhackers.com · 17 days ago

A phishing-as-a-service operation dubbed Milk Dragon, also known as NaiLong, is abusing discount-themed Facebook and TikTok posts to steal payment-card data and intercept multi-factor authentication (MFA) challenges. Group-IB identified 258 phishing pages linked to the kit since October 2025, with victims across 66 countries.

FTC Probes OpenAI, Anthropic as AI Agent Safety Risks Draw Scrutiny

www.techrepublic.com · 17 days ago

The FTC is investigating OpenAI, Anthropic and other AI firms over potential consumer harms, safety claims and risks tied to increasingly autonomous AI systems.

AI Agents Aimed SQL Injection at US and Canadian Government Sites

www.securityweek.com · 17 days ago

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.

12 Best SSO Solutions Compared (2026): Features & Pricing

gbhackers.com · 17 days ago

Microsoft Entra ID is the best SSO for M365-licensed organizations bundled economics end most debates while Okta is the best neutral anchor for mixed-SaaS estates, with Auth0 (an Okta product line, not a separate vendor) leading developer login.

EU Cyber Resilience Act ‘completely kills’ manual vulnerability triage

www.csoonline.com · 17 days ago

Independent security experts see the EU Cyber Resilience Act (CRA) reshaping international technology markets to emphasize cyber resilience from the ground up, thereby testing the operational capacities of technology vendors whose wares compete in those markets.

Windows 11 26H2 Enables Settings Backup by Default for Eligible Devices

gbhackers.com · 17 days ago

Microsoft has automatically enabled Windows settings backup for eligible commercial devices running Windows 11, version 26H2. Microsoft positions this capability as a vital resilience measure for enterprise endpoint recovery. The change is applicable when organizations have left the relevant backup policy in a “Not Configured” state.

12 Best IGA Tools Compared (2026): Features & Pricing

gbhackers.com · 17 days ago

SailPoint remains the best overall IGA platform for certification depth and AI-assisted reviews, with Saviynt the best converged alternative when ERP-grade SoD must ship cloud-native. Evaluating the broader landscape across the top Identity and Access Management (IAM) companies shows how access governance has evolved from static audit checklists into dynamic risk-control planes.

11 Best PAM Solutions Compared (2026): Features & Pricing

gbhackers.com · 17 days ago

CyberArk remains the best overall PAM platform for depth-driven enterprises, while Delinea is the best pick for usability-led deployments and Teleport the best modern choice for engineering infrastructure access. Enterprise risk teams evaluate these platforms directly alongside the Top 10 Best Privileged Access Management (PAM) Solutions for 2026 to eliminate unmanaged administrative sprawl.

12 Best IAM Solutions Compared (2026): Features & Pricing

gbhackers.com · 17 days ago

For workforce identity, Microsoft Entra ID is the best pick for M365-gravity organizations (bundled economics are decisive) and Okta the best neutral anchor for mixed-SaaS estates. Developer-facing login is a different purchase FusionAuth and Descope lead that lane.