Bitcoin Core Patches AI-Found Flaw That Could Crash Windows and Mac Nodes
Bitcoin Core has fixed a medium-severity flaw that could let a connected peer crash nodes on Windows, macOS and BSD. An automated AI-assisted scan identified the issue.
Volt Typhoon Used ‘Silent Train’ Network in Four Zero-Day Campaigns
Lumen's Black Lotus Labs says Volt Typhoon used a covert network of compromised routers and enterprise devices to hide four confirmed zero-day campaigns and one likely campaign targeting critical infrastructure.
Hugging Face Malware Campaign Returns With Crypto Miners and Backdoors
A malware campaign using fake Qwen2 models has returned to Hugging Face with crypto miners and backdoors. Researchers recorded more than 32,000 downloads, not confirmed infections.
CISA Warns Linux Fragnesia Flaw Is Being Chained With PHP2Shell
CISA has added Linux kernel flaw CVE-2026-46300 to its exploited vulnerabilities catalog after attackers chained it with PHP2Shell to gain root access on vulnerable systems.
Contractor’s Personal AI Agent Reportedly Exposed Pentagon Network Credentials
A WIRED investigation says an Accenture contractor connected a personal Claude Code agent to a U.S. defense network, potentially exposing login credentials and sensitive network details. Accenture disputes the allegations.
CitySourced Database Exposure Reveals 42 Million Documents and Personal Information
A security researcher discovered a publicly accessible database linked to CitySourced containing approximately 42 million documents and 450,000 JSON files with sensitive personal information. The database was later restricted following responsible disclosure.
Binance Links $6.3 Billion Security Breach to Compromised DevOps Laptop
Binance has linked a massive security incident affecting its cryptocurrency wallets to a potentially compromised laptop belonging to a DevOps engineer, with the exchange estimating the total impact at approximately $6.3 billion.
319 Chrome Extensions Caught Hijacking Searches, Affecting 13.4 Million Installations
Security researchers have uncovered 319 Chrome extensions with 13.4 million reported installations that hijack browser searches and redirect users through tracking servers to generate advertising revenue.
Japan Airlines Data Breach Exposes Personal Information of 92,000 Customers
Japan Airlines has confirmed a data breach affecting approximately 92,000 customers after attackers accessed its Amadeus passenger reservation system, exposing personal and travel information.
GitHub Introduces Package Firewall to Block Malicious npm Packages Before Installation
GitHub has introduced a package firewall in public preview to block malicious npm packages, suspicious installation scripts and vulnerable dependencies before they reach developers' systems.
Telegram for Android Flaw Could Let Hackers Take Full Control of Phones Through Calls
A Telegram for Android vulnerability could allow attackers to take complete control of smartphones through voice calls. The flaw affects older versions and was fixed in version 12.10.4.
Reddit May Require Users to Log In Before Browsing the Platform
Reddit is preparing a major change to how people access its platform, with the company planning to introduce login requirements for users who currently browse the website without an account.
AI-Powered Cyberattacks Target Banks Worldwide, Exposing 100,000 Customers
AI-assisted cyberattacks are targeting financial institutions worldwide, exposing approximately 100,000 records in South Korea, while separate incidents cause millions in losses across Italy, India and the cryptocurrency sector.
Loading
