Fake Solana Starter Kit Targets AI Coding Agents With a Remote Access Trojan
A fake Solana starter kit on GitHub contains a PowerShell command that can install a NetSupport remote-access trojan when an AI coding agent follows its README.
Android “SMS of Death” Flaw Can Crash Phone Service Without a Tap
A malformed WAP Push message can silently crash Android’s phone service and drop calls. Google’s October update addresses the issue on newer Android releases.
Palo Alto Confirms PHP2Shell Attacks on Exposed PAN-OS Firewalls
Palo Alto Networks says PHP2Shell attacks are hitting exposed PAN-OS management interfaces, while Unit 42 independently verifies Dream’s report of 25 rooted servers.
CISA Adds GitLab CVSS 10.0 Flaw to KEV After Alpine Attack Attempt
CISA added CVE-2026-97229 to its exploited list as Alpine Linux disclosed an attack attempt that crashed GitLab workers, though it found no proof of code execution.
Drupal Warns of Actively Exploited Commerce Core Flaw
Drupal has warned that attackers are exploiting CVE-2026-118539, a highly critical access-bypass flaw in Commerce Core used by online stores.
The Real Cost of Scaling Modern AI Applications
AI applications can look affordable during development, then become surprisingly expensive once thousands of people start sending requests. Each prompt, generated image or automated workflow consumes computing capacity and supporting infrastructure.
Mistral Releases Large 4 Model With Open Weights and Cybersecurity Focus
Mistral has released the open weights for its Large 4 AI model, giving developers more control while raising fresh questions about its cybersecurity capabilities and misuse risks.
Binance Working With FBI and Secret Service After $6.3B Hack
Reuters reports that Binance is cooperating with the FBI and U.S. Secret Service after the $6.3 billion cryptocurrency theft, citing a person familiar with the matter.
Intel Warns PC Slowdown Will Last Into 2027 as Memory Shortage Persists
Intel expects PC market weakness through early 2027, while its CFO says memory supply conditions are unlikely to improve during the year.
TRM Links $6.36B Binance Theft to North Korean TraderTraitor Group
TRM Labs says the $6.36 billion Binance theft was carried out by North Korea-linked TraderTraitor, with funds moved across ten blockchains in about 20 minutes.
Fake Padre Terminal App Removed After $23,000 Crypto Theft Report
A fake Padre Terminal app was removed from Apple's App Store after a blockchain investigator linked one victim to it and traced about $23,000 in losses across 27 Solana wallets.
Google Expands AI Mode Ads to 10 More Countries, Including India
Google is expanding ads in AI Mode to 10 more countries, including India and Pakistan, while testing follow-up ads in U.S. conversations.
Bitcoin Core Patches AI-Found Flaw That Could Crash Windows and Mac Nodes
Bitcoin Core has fixed a medium-severity flaw that could let a connected peer crash nodes on Windows, macOS and BSD. An automated AI-assisted scan identified the issue.
Loading
