WatchGuard Fixes Critical Fireware OS Code Injection Vulnerability
The update addresses 15 vulnerabilities, including a critical code injection flaw that could let attackers compromise affected firewalls.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
WSL Containers Reach GA with Admin Image-Source Controls
Microsoft's general availability of Linux containers in WSL includes administrative limits on where images can be pulled from.
EU Cyber Resilience Act imposes new container and Kubernetes duties
The EU CRA turns cloud-native security best practices into legal requirements for anyone distributing containerized products in Europe.
Claude Enterprise feeds chats and uploads to security monitoring tools
Anthropic's Claude Compliance API connects enterprise activity to more than 100 security vendors for oversight of AI use.
Schneier Calls for Better Reporting on AI ‘Genie Behavior’
Security researcher Bruce Schneier argues that AI systems often complete tasks in unintended ways, and he wants journalists to report on the phenomenon more carefully.
OpenInfra Europe's JFrog Artifactory breach compromises packages
A self-hosted JFrog Artifactory instance used by OpenInfra Europe was breached via an authentication bypass, prompting warnings that downloaded artifacts may be compromised.
CSuite Phishing Combines Session Theft with Remote-Access Deployment
A US-focused phishing campaign tracked by ANY.RUN shows how a single lure can lead to both Microsoft 365 account takeover and persistent endpoint access via remote management tools.
OpenSSL Patches High-Severity DTLS Flaw That Leaks Heap Memory
A bug in OpenSSL's DTLS handshake resend logic can expose heap memory or crash UDP-based applications, with fixes now available for supported branches.
South Africa Asks for Help After Air Traffic Control Ransomware Attack
A ransomware toolkit was found on at least one operational network, prompting South Africa to seek external assistance.
OpenSSL and WolfSSL Patch Dozens of High-Severity Flaws
Security updates for two widely used open source cryptographic libraries address roughly a dozen high-severity vulnerabilities each.
Scans Target Wordfence WAF File on WordPress Sites
A small wave of scans for the Wordfence WAF file suggests automated reconnaissance of WordPress sites.
New Spectre v2 Variant BTR Leaks Linux Root Password Hashes
Researchers show a new Spectre v2 variant, Branch Target Reuse, can recover Linux root password hashes in minutes on patched Intel systems.
Reco Raises $55M to Expand AI Agent Security Business
The new funding brings Reco's total to $140 million as competition among AI agent security startups intensifies.
Dodo Pizza confirms data breach after hacker claims
The Russian pizza chain says customer names, contact details, and order information were exposed in a cyberattack.
Malicious Custom GPT on ChatGPT spreads RAT via fake CAPTCHA
Attackers are using sponsored Google results and a malicious Custom GPT to trick ChatGPT users into installing a remote access trojan.
Governing AI Agents: Webinar Tackles Access and Shadow AI
As AI agents enter production faster than security teams can adapt, a new webinar addresses how to govern their access and curb shadow AI.
Windows 11 26H2 Update Begins Rolling Out to All Users
Microsoft's annual Windows 11 feature update is now rolling out, though the source says users may not see major changes.
Quantum random number generators need more than statistical tests, ETSI says
New ETSI technical report warns that quantum random number generators can appear statistically sound while still leaking clues that attackers could exploit.