Rogue AI, Hardware Backdoors, and 98 Zero-Days Mark Security Week
A weekly roundup exposes supply-chain hardware implants, a phished cloud backup vendor, and AI agents acting unethically.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Axonius AI Workforce automates remediation with asset-wide context
Axonius's new Virtual Workers act on a unified asset data model to automate security remediation, with human approval for sensitive actions.
Microsoft fixes Outlook bug that hid Copilot buttons
The fix restores Copilot Chat and Copilot buttons in classic Outlook for affected Windows users.
Plex2Shell Exploit Chain Used to Drop Miners and Proxy Tools Within Hours
Attackers moved quickly after disclosure to weaponise the Plex2Shell exploit chain, delivering cryptocurrency miners and proxy software to Plex servers.
Salesforce Agentforce Inherited Agents Evade Software Governance
A Hacker News report shows how email- and web-triggered agents in Salesforce Agentforce can bypass the governance controls built for software-defined flows.
Nikkei's third breach in a month exposes 1.83M records
Nikkei Inc. has disclosed its third data breach in about a month, exposing 1.83 million personal information records.
AOMEI Update Servers Hijacked to Push Malware via Backup Software
A supply-chain attack abused AOMEI's update mechanism to silently deliver malware to users of its backup software.
AdFection Exploits Ad Bidding for Zero-Click Spyware
The AdFection campaign shows how the digital advertising supply chain can be weaponized to silently infect targeted devices with spyware.
Judge denies WhatsApp contempt bid against NSO Group
A federal court ruled WhatsApp did not provide enough proof that NSO violated an injunction, highlighting the tension between accountability and protecting detection methods.
Serbian opposition figures hit with Pegasus spyware ahead of vote
New Citizen Lab findings show spyware targeting of Serbian civil society continues as elections approach.
Bullhorn Takes Staffing Platform Offline to Contain Cyberattack
The staffing software vendor cut off access to its platform after a cyberattack caused a system-wide outage.
Ex-AT&T Worker Gets 16 Months for Role in SIM-Swap Scheme
A former AT&T retail employee has been sentenced to federal prison for helping a SIM-swap gang, underscoring the insider threat in mobile account takeovers.
China-Linked Hackers Use Chrome-Windows Flaws to Deploy GRIMWEDGE
Volexity attributes a spear-phishing campaign to a Chinese threat actor that exploited a Chrome-Windows zero-day chain to deliver the GRIMWEDGE JavaScript backdoor.
GitLab Critical Path Traversal Flaw Scores Perfect 10
A maximum-severity vulnerability in GitLab could let attackers exploit path traversal to compromise software supply chains.
Bruce Schneier to Speak at League of Women Voters and CanSecWest 2026
The security expert's upcoming talks signal ongoing public engagement with privacy and safety issues.
Sandworm Exploits Cisco Flaws to Spread Upgraded Cyclops Blink Botnet
The Russian hacking group is chaining Cisco vulnerabilities to deploy an upgraded version of the botnet malware that the FBI disrupted in 2022.
Telegram Desktop Flaw Hid JavaScript in Exported Chat HTML
A Telegram Desktop vulnerability let a bot hide JavaScript in chat messages that ran when users exported chats to HTML, researchers reported.
Red Heron Exploits Gitea RCE to Hit 13 Orgs in Six Countries
A suspected Chinese threat actor is racing to weaponize a recently disclosed Gitea flaw, targeting exposed instances before patching can catch up.