Study Finds 10 of 12 Agentic Red Team Tools Vulnerable to Sandbox Escape and Full Host Compromise
Summary A peer-reviewed security audit by researchers at Cracken has revealed that the vast majority of popular agentic offensive security platforms are themselves critically insecure. The study, published June 23,…
DragonForce Ransomware Gang Hides C2 Traffic Inside Microsoft Teams Relay Infrastructure Using Novel Backdoor.Turn RAT
Summary Researchers at Broadcom’s Symantec and Carbon Black have uncovered a sophisticated new technique used by the DragonForce ransomware group: hiding command-and-control communications inside Microsoft Teams relay infrastructure. The custom…
Linux Foundation Launches Akrites — A Unified Vulnerability Response Framework Backed by AWS, Google, Microsoft, and OpenAI
Summary The Linux Foundation has officially launched Akrites, a new industry-wide initiative to defend critical open-source software against AI-enabled cyber threats. The framework establishes a shared Security Incident Response Team…
OpenAI and Broadcom Unveil Jalapeño — A Custom LLM Inference Chip Designed to Slash AI Costs by 50%
Summary OpenAI and Broadcom have unveiled Jalapeño, OpenAI’s first custom-designed “Intelligence Processor” — an inference accelerator built from scratch specifically for large language model workloads. The chip went from initial…
15 Malicious JetBrains Plugins Caught Stealing AI API Keys — 70,000 Developers Exposed in 8-Month Campaign
Summary Security researchers at Aikido discovered a coordinated supply chain campaign involving 15 malicious plugins on the JetBrains Marketplace, all designed to steal AI provider API keys from developers. The…
NAIC Confirms PeopleSoft Breach — ShinyHunters Exploit Critical Oracle RCE to Hit 100+ Organizations
Summary The National Association of Insurance Commissioners (NAIC) has confirmed a significant cyberattack on its Oracle PeopleSoft systems, exposing portions of its data infrastructure. The breach, attributed to the prolific…
Splunk Enterprise Pre-Auth RCE Under Active Exploitation — Your SIEM Is the Target Now
Summary CVE-2026-20253, a critical unauthenticated remote code execution vulnerability in Splunk Enterprise, is being actively exploited in the wild. The flaw, carrying a CVSS score of 9.8, exists in the…
RoguePlanet — Unpatched Microsoft Defender Zero-Day Grants SYSTEM Access on All Windows 10 and 11
Summary A zero-day privilege escalation vulnerability tracked as CVE-2026-50656, dubbed “RoguePlanet,” has been confirmed in the Microsoft Defender Malware Protection Engine. The race condition flaw allows attackers to escalate privileges…
macOS Gaslight — North Korean Rust Backdoor Uses Prompt Injection to Fool AI Malware Analysts
Summary SentinelLABS has uncovered “macOS.Gaslight,” a sophisticated North Korea-linked Rust-based backdoor that uses a novel defensive technique: embedded prompt injection payloads designed to trick AI-assisted malware analysis tools into aborting…
CISA Warns of Triple CVSS 10.0 Ubiquiti UniFi OS Exploit Chain — Patch Deadline Tomorrow
Summary CISA has added three critical Ubiquiti UniFi OS vulnerabilities to its Known Exploited Vulnerabilities catalog, all carrying the maximum CVSS score of 10.0. The flaws — CVE-2026-34908 (access control…