CISA Confirms Ransomware Gangs Exploiting BlueHammer Microsoft Defender Privilege Escalation Flaw
Summary CISA has confirmed that ransomware gangs are actively exploiting CVE-2026-33825, a high-severity privilege escalation vulnerability in Microsoft Defender dubbed “BlueHammer.” The flaw, which was initially leaked by a security…
OpenAI Previews GPT-5.6 Sol — Its Most Capable Model for Vulnerability Research Yet
Summary OpenAI has launched a limited preview of GPT-5.6 Sol, the flagship model in its new GPT-5.6 family alongside Terra and Luna variants. Currently restricted to trusted partners and the…
SANS 2026 Detection Engineering Survey: 83% Use AI Tools, but Only 42% Trust Them for Core Detection Work
The SANS 2026 Detection Engineering Survey, conducted in partnership with Anvilogic, paints a sobering picture of the state of defensive security operations. Surveying 307 practitioners across more than 10 industries,…
Polymarket Hit by Frontend Supply Chain Attack — $3.1 Million Drained from User Wallets
Prediction market platform Polymarket has confirmed a frontend supply chain attack that resulted in approximately $3.1 million being stolen from eleven user wallets. The attack, which began around June 25,…
Anthropic Accuses Alibaba of Using 25,000 Fake Accounts to Distill Claude AI — 28.8 Million Exchanges Harvested
Anthropic has accused Chinese tech giant Alibaba of orchestrating the largest known model distillation attack against its Claude AI platform. In a letter sent to the U.S. Senate Banking Committee…
Microsoft Disrupts StegoAd Campaign — Removes 119 Malicious Edge Extensions That Hid Malware in Images
Microsoft has removed 119 malicious Edge browser extensions and suspended over 90 associated developer accounts in a takedown of “StegoAd,” a long-running malware operation active since at least 2021. The…
FBI Warns Russian Intelligence Is Phishing Signal Users for Backup Recovery Keys
The FBI and CISA have issued an updated warning that Russian intelligence services are actively targeting Signal users through sophisticated phishing campaigns aimed at stealing backup recovery keys. The advisory,…
Linux Kernel Pedit COW Exploit (CVE-2026-46331) Grants Root via Page Cache Corruption
A critical privilege escalation vulnerability in the Linux kernel’s traffic control subsystem, tracked as CVE-2026-46331 and dubbed “Pedit COW,” allows any unprivileged local user to gain root access on affected…
KDDI Breach Exposes Up to 14.2 Million Email Credentials Across Six Japanese ISPs
Japanese telecommunications giant KDDI Corporation has disclosed a data breach impacting an email system it operates for six internet service providers, potentially exposing up to 14.22 million email addresses and…
BreachRx Launches Rex Platform — An Agentic AI Incident Command Center for Simultaneous Breach Response
Summary BreachRx has launched the Rex Platform, an agentic AI incident command center designed to handle multiple simultaneous breaches — a scenario the company argues is now the norm in…