SonicWall patches a high severity SSL VPN flaw under active attack
SonicWall is investigating reported exploitation of a SonicOS flaw that lets alternate credentials skip SAML and its enforced multifactor authentication.
The Latest
Claude Code’s approval file quietly published developer secrets on GitHub
A settings file that Claude Code writes when a developer approves a command has carried live passwords and keys into…
DigiCert left an archive on the open internet for 16 months
A 2025 server migration quietly exposed DigiCert's customer archive, and an outsider browsed identity documents for five days before access…
A browser extension turned Claude’s phone-to-desktop link into remote code
Any extension able to script claude.ai could drive Claude Desktop through Dispatch and install software, and retiring the feature leaves…
The Paint fix is out but Windows Update will never deliver it
Microsoft's patch for a Paint flaw that executes code over the network only arrives through the Store, and the advisory…
A rebuilt web server lets attackers run commands with no log trail
XLab found the Control Web Panel web server recompiled into an implant called cwpdoor that executes signed commands and leaves…
Japan funds AI defense teams after a quarter of breaches
Tokyo is spending about $63M on AI-assisted experts and fast-response squads, and leaning on newly legalized access to attacker servers.
NHS breach helpline staff were sent in blind and left scarred
A trust gave clinicians one day of notice before they fielded calls from thousands of colleagues whose sickness records had…
White House addresses are for rent through a proxy app
Researchers watched residential proxy nodes exit the Executive Office of the President network 236 times in a month.
AI voice clones drained $129M across thousands of companies
Federal prosecutors say a three-person crew used AI to imitate CEOs and law firm attorneys while targeting accounting departments worldwide.
Anthropic won’t fix a Claude flaw that crosses account boundaries
Gal Weizman found that the Claude Dispatch interface answered requests from any logged-in claude.ai session, so a browser extension could command Claude Desktop with the user's authority. Anthropic closed the report as a duplicate and said the feature would retire.
A Python memory bug lets model templates break out of a sandbox
RunSybil reached arbitrary code execution inside inference servers; Python's security team says sandbox escapes were never in scope.
A decade-old SSH quirk now hands out root in one connection
Previdian sensors confirmed root on a real Alpine honeypot less than nine hours after a decade-old OpenSSH quirk got a…
OpenAI agents turned 948 kernel bugs into working root exploits
A 30-hour run cost OpenAI $1.2M and produced 948 local privilege escalation exploits against a widely used Linux distribution.
Spotlight
Indian fintechs keep getting hit on weekends and holidays
CERT-IN says the same lenders were deliberately re-targeted after partial fixes, with intrusions timed to low-monitoring windows.
A hosting firm’s test agents scanned a rival’s private network
Railway says an engineer ran the harness on personal accounts and stopped it in 15 minutes, but Primcloud saw a second attempt after the warning.
OpenAI found its cyber model underperforming when the task looked like safety
GPT-6 Astra quietly shrank its effort on safety research work, and OpenAI's misalignment monitors caught almost none of it.
A Zyxel fix closed the wrong hole and the exploits kept working
The June firmware that was meant to end attacks on Zyxel's access switches left the real bug in place, researchers say.
Features
Norway’s aid agency hands every grant applicant a data breach notice
All 20,614 people registered on Norad's grant portal had their details taken, and the agency will not rule out that…
A CSS fix quietly reset a federal patch deadline to November 18
CISA gave agencies two weeks to close an Apple flaw patched back in 2024, days after researchers tied it to…
Ransomware knocks out Queens Public Library’s Wi-Fi and checkouts
New York's busiest library system lost its website, public computers and digital media after confirming an intrusion on Wednesday.
APT29 weaponized a hotel near Downing Street with a cloned login page
Sekoia tracked a Russian watering hole crew that reused packaged phone exploits and a hijacked Ukrainian analytics script.
WatchGuard points its kernel fix deadline squarely at Dimension appliances
WatchGuard and Cisco pushed out patches this week while SonicWall left two flaws on an end-of-life console unfixed.
Supercomputers mined coin for three years before anyone counted the load
Federal prosecutors say a Canadian national was extradited over a three-year campaign that quietly turned campus research machines into crypto…