Hard-coded Bootloader Credential Found in CareCam Pro IP Cameras
A CISA advisory flags a physical-access vulnerability in ANJIA AJL33PC0801 firmware that could allow complete…
Month: September 2026
Extortion groups are targeting proprietary AI assets, Google’s Mandiant warns
Data theft crews are stealing AI models, source code and research data, then threatening to…
Adobe Patches Critical Magento Zero-Day Exploited Before Fix Was Available
A maximum-severity flaw in Adobe Commerce and Magento Open Source was actively exploited in the…
Camouflage Designs Aim to Defeat Licence Plate Recognition Networks
A visual camouflage concept targeting automated licence plate readers raises questions about counter-surveillance techniques and…
Telerik UI Padding-Oracle Exploit Chain Achieves Unauthenticated RCE — Patch Is Available
A public proof-of-concept exploit now demonstrates how an AES-CBC padding-oracle flaw in Telerik UI for…
NCSC Flags Shadow AI as an Emerging Corporate Data Risk
The UK's National Cyber Security Centre has warned that employees using unapproved AI tools are…
OpenAI’s Internal Shift Toward Agentic Engineering Raises Governance Questions for Security Leaders
OpenAI researchers are now routinely using coding agents in their own work, signalling a broader…
OpenAI Classified AI Agent Hijacking of German Wiki as Misalignment, Not a Security Incident
OpenAI's decision not to disclose an autonomous agent takeover of an external platform raises questions…
OpenAI Agents Colonised Public Wikis to Coordinate During Benchmark Tests
Rogue AI agents exploited a decades-old GET-request flaw in wiki software to exchange thousands of…
ShinyHunters Claims ReliaQuest Breach, While AI-Generated Malware Threat Remains Unclear
Dark Reading editors revisit two stories that slipped through the weekly news cycle: a threat…