#безопасность
-
AI Agents Are Installing Unregistered Code on Corporate Networks
Researchers have shown that AI agents blindly trust llms.txt files and pull in packages via links to unclaimed domains — fertile ground for supply-chain attacks.
-
Plex Urges Immediate Update After Patching Undisclosed Vulnerabilities
Plex has released Media Server and Desktop updates that fix several vulnerabilities, but is withholding the details for now. The company recommends installing them as soon as possible.
-
Google Patches Actively Exploited 0-Day in Chrome's V8 Engine
An emergency Chrome update fixes 12 vulnerabilities, including CVE-2026-85046 in the V8 engine, for which a working exploit already exists.
-
Cloudflare and OpenAI: Vulnerability Discovery That Accounts for Real Traffic
Cloudflare is launching an invitation-only Vulnerability Discovery and Remediation service that ties vulnerabilities found in code to production traffic and tells you what to fix first.
-
HPE Patches Critical Remote Code Execution Vulnerability in ArubaOS-CX
Hewlett Packard Enterprise has fixed a critical flaw in the ArubaOS-CX network operating system that allowed an unauthenticated attacker to remotely execute code with elevated privileges. A total of 24 vulnerabilities were patched.
-
Coder Infrastructure Breach: Attackers Served Malicious Terraform Modules
Attackers infiltrated Coder's cloud infrastructure and spoofed its registry servers to distribute modules carrying credential-stealing code.
-
Breach in Thomson Reuters Court Software: SSNs and Sealed Records at Risk
Thomson Reuters has reported that unknown parties gained access to files on its C-Track case management platform. Courts in 11 U.S. states, the Virgin Islands, and Ontario, Canada, were affected.
-
Critical Cisco Nexus 9000 Flaw Enables Remote Code Execution With Root Privileges
Cisco has released patches for a critical hole in its Silicon One–based Nexus 9000 switches that lets an unauthenticated attacker execute code with root privileges. At the same time, a “hardening” release of IOS XR went out, closing seven CVEs, two of them rated 9.8.
-
Linux 7.3 Will Disable RandStruct by Default for the Sake of Rust Support
In the Linux 7.3 kernel, the RandStruct protection feature is now turned off by default whenever Rust support is available. The developers made a compromise for the sake of complete build coverage.
-
Critical Elementor Pro Vulnerability Being Used to Hijack WordPress Sites
The recently patched CVE-2026-32475 vulnerability in the popular Elementor Pro plugin allows attackers to upload a web shell and execute arbitrary commands on the server. Wordfence has already blocked around 200,000 attack attempts.
-
The Shai-Hulud Worm Now Hunts for Credentials in 469 Places — and That's a Symptom of a Tactical Shift
GitGuardian researchers have found that a new variant of the Shai-Hulud infostealer worm checks 469 secret-storage locations instead of the previous 189. Attackers have stopped breaking trust in the supply chain and are simply harvesting the keys that trust rests on.
-
Pegasus in Serbia Again: Activist's iPhone Infected via Zero-Click in iMessage
Citizen Lab and the SHARE Foundation have documented the infection of a student protest movement member's phone with the Pegasus spyware. Since the start of 2026, at least 14 people in the country have been targeted.
-
CISA Adds Seven Exploited Vulnerabilities to Its Catalog
The U.S. agency CISA has added seven fresh vulnerabilities to its Known Exploited Vulnerabilities catalog — among them flaws in SonicWall, JFrog Artifactory and AI infrastructure that attackers are using to install reverse shells and miners.
-
Researcher Publishes FalconFlank — a 0day Exploit for CrowdStrike Falcon
A hacker going by the handle Chaotic Eclipse has released a PoC for a privilege-escalation vulnerability in CrowdStrike Falcon — already the third exploit against popular security products in a short span.
-
Hackers Attack the Sangoma Switchvox VoIP Platform Through SQL Injection
Attackers are mass-exploiting the CVE-2026-9586 vulnerability in Sangoma Switchvox, which allows unauthenticated code execution and the deployment of a reverse shell.
-
Lawsuit Demands Disclosure of Secret AI Testing Rules in the US
The nonprofit Protect Democracy has sued four federal agencies, demanding that they make public the classified procedure for vetting cutting-edge AI models before their release.
-
Vulnerability in Popular WordPress Backup Plugin Threatens Takeover of Millions of Sites
An SQL injection in All-in-One WP Migration and Backup lets an unauthenticated attacker execute code and gain full control over a site. Only about a third of users have updated.
-
Dropbox Accounts Breached Through a Flaw in Lenovo's Email Verification
An attacker registered fake Lenovo IDs against other people's addresses and used them to log into Dropbox without a password. Around 5,000 accounts were affected.
-
A malicious .git turns AI agents into runners of someone else's code
Manifold Security has disclosed eight vulnerabilities in seven console AI coding agents: the repository itself slips in a command that the agent runs on the developer's machine — outside the sandbox and with no confirmation prompt.
-
Comcast Routers Learned to Spot Motion in Your Home — and to Share It
Comcast has turned its Wi-Fi routers into motion sensors, but, as Bruce Schneier points out, the terms of service hide a clause about handing that data to third parties.
- More