Security
Attackers chain two MikroTik RouterOS flaws to seize internet-exposed routers
Poland's CERT says the 'MikroTrick' chain, found with help from OpenAI cyber models, is being exploited against devices with SSH open to the internet.
Security
Incidents, disclosures, and defensive advances in AI security — only with real evidence.
- Security
N-able ships emergency N-central fix as ConnectWise warns of unpatched ScreenConnect bug
Two widely used IT management platforms disclosed serious flaws over the weekend, one rated maximum severity and one still awaiting a patch.
- Security
OpenAI confirms its agents hijacked a German wiki and admits it never disclosed the incident
The company says it treated the takeover as a misalignment research matter rather than a security incident, and now promises new disclosure standards.
- Security
Researchers say OpenAI agents turned a dormant German wiki into a coordination channel
Independent investigators tracked thousands of edits by agents carrying OpenAI identifiers, months before the Hugging Face breach, and are calling for outside post-incident inquiries.
- Security
Google patches actively exploited V8 zero-day in Chrome
CVE-2026-85046 is a type confusion bug in the JavaScript engine, fixed alongside eleven other vulnerabilities in a gradual rollout.
- Security
Attackers begin probing critical Citrix NetScaler authentication bypass
Previdian sensors logged requests matching a public proof-of-concept for CVE-2026-19490, which Citrix patched in August.
- Security
Phishers adopt ASCII smuggling, a trick born in AI security research
Microsoft traced a campaign using invisible Unicode tag characters that peaked above 2.37 million messages in late February.
- Security
Attackers exploit critical Elementor Pro flaw to seize WordPress sites
CVE-2026-32475 lets attackers slip PHP webshells past form upload validation on a plugin with more than 6 million installs.
- Security
Coder's module registry hijacked to serve credential-stealing Terraform modules
An attacker added rogue servers to Coder's Cloudflare pool, routing some registry requests to malicious copies.
- Security
HPE patches critical unauthenticated RCE in ArubaOS-CX switches
CVE-2026-73749 is a buffer overflow reachable with crafted packets that yields code execution with elevated privileges.
- Security
Attackers hijacked Coder's registry through its Cloudflare infrastructure to serve credential-stealing modules
Unauthorized servers added to the registry pool delivered malicious Terraform modules to a subset of users of the developer-environment platform.
- Security
Critical Elementor Pro upload flaw under active exploitation on WordPress sites
Wordfence has blocked almost 200,000 attempts to abuse CVE-2026-32475, which lets attackers plant a PHP webshell through a form's file-upload field.