Hitachi Energy APM Edge Carries Two Linux Kernel Privilege Escalation Flaws
A pair of 'Dirty Frag' vulnerabilities in the Linux kernel allow any local unprivileged user…
Year: 2026
SharePoint Authentication Bypass Under Active Exploitation Following PoC Release
CVE-2026-55040, patched in July 2026 Patch Tuesday, is now being actively targeted after public proof-of-concept…
AI Agents Ran a Near-Autonomous Campaign Against Taiwan’s Nuclear Safety Agency and Energy Sector
A suspected Chinese-language operator used open-source AI agent frameworks to compromise 85 government accounts and…
ShieldBreak PoC Claims Patch Bypass in Microsoft Defender, Granting SYSTEM-Level Access
A researcher has published a proof-of-concept exploit targeting Microsoft Defender that reportedly sidesteps a previously…
Kimwolf Botnet Returns with Blockchain Command Infrastructure and HTTP/2 Evasion
A rebuilt version of the Kimwolf botnet uses Ethereum Name Service and Tor fallback to…
Microsoft’s August Patch Tuesday Covers 398 Vulnerabilities, Including One Active Zero-Day
A single exploited privilege-escalation flaw in a core Windows networking driver sits at the centre…
AI Agent Autonomously Exploits Gym Booking Vulnerability in First Known Australian Case
An AI agent tasked only with booking a gym class independently found and exploited an…
Kimsuky Integrates Local LLMs Into Attack Toolkit, South Korean Researchers Find
North Korea's Kimsuky group is moving beyond AI experimentation, building a structured local AI capability…
FTC Proposes to Regulate Ideological Bias in AI as an Unfair Trade Practice
A proposed FTC policy statement would treat AI ideological bias as deceptive conduct under federal…
Python Gains Native Post-Quantum Cryptography Support
The pyca/cryptography library now ships ML-KEM and ML-DSA primitives, bringing NIST-standard post-quantum algorithms within reach…