Cybersecurity, AI, etc.
Summary A new data-stealing malware dubbed ChocoPoC is actively targeting vulnerability researchers by hiding in fake proof-of-concept exploit repositories on GitHub. Discovered jointly by YesWeHack and Sekoia on July 1,…
Summary Google has released Chrome 151 with fixes for 382 security vulnerabilities across the browser’s core engine, graphics stack, extensions framework, and cross-platform components. Among the patched flaws, 15 are…
Summary Apple has released out-of-band security updates for iOS 26.5.2, iPadOS 26.5.2, macOS Tahoe 26.5.2, and Safari 26.5.2, patching nearly 30 vulnerabilities — including four WebKit flaws that were discovered…
Summary A critical pre-authentication remote code execution vulnerability in Progress Kemp LoadMaster appliances (CVE-2026-8037, CVSS 9.8) is being actively exploited following the public release of proof-of-concept exploit code. The flaw…
Summary CISA has added a high-severity Microsoft SharePoint Server vulnerability (CVE-2026-45659) to its Known Exploited Vulnerabilities catalog after confirming active exploitation in the wild. The deserialization-of-untrusted-data flaw carries a CVSS…
Skyhawk Security has published research demonstrating that its agentic AI red team system achieved full administrative control of a financial services company’s entire AWS organization in a matter of seconds…
Anthropic closed out June with a one-two punch: the launch of Claude Sonnet 5 on June 30 and the simultaneous lifting of U.S. export restrictions on its most powerful models,…
Nissan has confirmed a data breach affecting current and former employees across the U.S., Canada, Mexico, and Brazil after attackers exploited a zero-day vulnerability (CVE-2026-35273) in Oracle PeopleSoft, the enterprise…
Microsoft Incident Response and its Defender security research team have published a detailed advisory warning that attackers can hijack AI agents — including those integrated with Microsoft 365 Copilot, Copilot…
Security researchers at XM Cyber have publicly disclosed CVE-2026-39118, a macOS vulnerability that allows a standard (non-root) user to silently disable Endpoint Detection and Response (EDR) and Mobile Device Management…