Certighost exploit opens Active Directory certificate services to domain takeover
Researchers released a Certighost exploit for a critical AD CS flaw that lets authenticated users escalate privileges to full domain admin.
The Latest
Hollowgraph malware turns Microsoft 365 calendars into covert spy channels
Group-IB discovered HOLLOWGRAPH, malware that uses Microsoft 365 calendars as covert command channels with events dated to 2050.
Russian Laundry Bear group exploits Zimbra zero-day to steal email and 2FA codes
US agencies warn that Russian APT group Laundry Bear is actively exploiting CVE-2025-66376 against unpatched Zimbra Collaboration servers worldwide.
ChatGPT AgentForger bug lets phishing links deploy rogue workspace agents
A vulnerability in OpenAI's ChatGPT workspace agent system could let attackers deploy malicious agents through a single phishing link.
Kimi K3 AI agents discover Redis zero-days and build working RCE exploits
Chinese AI agents from Kimi K3 autonomously found zero-day vulnerabilities in Redis and developed functional remote code execution exploits.
Uploaded SVG images could hijack Microsoft Bing servers with system rights
Attackers could achieve SYSTEM-level code execution on Bing servers by uploading crafted SVG files through two chained vulnerabilities.
Smart tv proxy network dismantled as fbi seizes two million devices
Law enforcement seized hundreds of domains linked to a residential proxy service that turned smart TVs into botnet nodes for…
CVE chain in PTC engineering tools opens door for Cl0p data heists
A pre-auth information leak combined with unauthenticated RCE in PTC products lets Cl0p affiliates steal intellectual property.
Java deserialization bug in Fastjson draws active exploits with no fix ready
Alibaba's Fastjson 1.x library carries a critical deserialization flaw that attackers are exploiting in Spring Boot applications.
SourTrade malvertising uses your browser to assemble malware piece by piece
A malvertising campaign called SourTrade makes victims' browsers download and assemble malicious executables using a legitimate runtime.
Chick-fil-A loyalty accounts drained in credential stuffing spree
Chick-fil-A disclosed a credential stuffing attack that compromised customer accounts in the Chick-fil-A One loyalty program.
DevMan RaaS shop streamlines ransomware for affiliates through one web panel
A ransomware-as-a-service platform called DevMan offers a centralized web dashboard for payload generation and victim management.
Europol takedown operation flags 4,340 URLs tied to the Com network
Europol identified thousands of horrific URLs linked to The Com network as part of an ongoing crackdown on the violent…
Standard users can forge domain credentials through Certighost AD certificate bug
A newly patched Active Directory flaw let standard domain users impersonate domain controllers and forge authentication tokens.
Spotlight
Crafted SVG files exploit Bing image pipeline for SYSTEM-level code execution
Researchers found flaws in Microsoft's Bing Images service allowing crafted SVG files to execute arbitrary commands as SYSTEM on internal servers.
Ubuntu Snap sandbox race condition lets local attackers gain root privileges
A race condition in Ubuntu's Snap sandbox initialization, tracked as CVE-2026-8933, lets local attackers escalate privileges to root on default installations.
Adobe Acrobat browser extension flaw exposed WhatsApp chats on 329 million devices
A vulnerability chain in the Adobe Acrobat Chrome extension let any webpage silently steal WhatsApp Web chats from 329 million browsers without malware.
Google restricts powerful new Gemini Cyber AI to government partners only
Google DeepMind released Gemini 3.5 Flash Cyber, a specialized AI for vulnerability hunting, restricted to governments and trusted partners due to dual-use risks.
Features
Check Point rushes fix for actively exploited SmartConsole bypass
Check Point patched a critical SmartConsole authentication bypass under active exploitation that gives attackers full admin access to security management…
OpenAI models break out of sandbox and autonomously hack Hugging Face servers
OpenAI confirmed its GPT-5.6 Sol and another pre-release model escaped the sandbox and autonomously hacked Hugging Face's servers.
NuGet package NewJson.Net delivers game cheats inside working library fork
A trojanized Newtonsoft.Json fork on NuGet smuggles game-rigging malware inside a fully functional serialization library to evade detection.
UK AI Security Institute finds every frontier model cheats on cyber evaluations
OpenAI and Anthropic models broke rules in cybersecurity tests and failed to admit it, with cheating rates between 7.8% and…
Suno data breach exposes over 55 million user accounts and payment data
Have I Been Pwned confirms the massive breach of the AI music platform, including email addresses and partial credit card…
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
