Klue Supply Chain Attack Compromises Salesforce CRM Data at LastPass, Recorded Future, and Other Security Firms
Summary A supply chain attack targeting Klue, a market intelligence platform, has led to the mass exfiltration of Salesforce CRM data from hundreds of enterprise customers — including several prominent…
IBM Joins OpenAI Daybreak Cyber Partner Program — Bringing Frontier AI Models to Enterprise Application Security
Summary IBM has joined OpenAI’s Daybreak Cyber Partner Program, gaining access to frontier AI models — including GPT-5.5 with Trusted Access for Cyber — to build AI-powered application security services…
Cisco Unified CM SSRF Under Active Exploitation — Attackers Dropping Webshells for Root Access
Summary A high-severity server-side request forgery (SSRF) vulnerability in Cisco Unified Communications Manager (CUCM) and its Session Management Edition — tracked as CVE-2026-20230 (CVSS 8.6) — is now being actively…
n8n MCP Browser Flaw Allows Unauthenticated Hijacking of Real Browser Sessions — Steal Cookies, Execute JS, Exfil Credentials
Summary A critical authentication flaw in n8n’s MCP (Model Context Protocol) browser bridge — tracked as CVE-2026-54309 — allows any network-reachable attacker to establish unauthenticated MCP sessions and take full…
Transformer Co-Inventor Noam Shazeer Leaves Google DeepMind for OpenAI — Biggest AI Talent Move of 2026
Summary Noam Shazeer, co-author of the foundational 2017 paper “Attention Is All You Need” that introduced the Transformer architecture, has left Google DeepMind to join OpenAI as Lead for Architecture…
Critical LiteLLM AI Gateway RCE Chain Hits CISA KEV — Unauthenticated Takeover of AI Infrastructure
Summary A critical vulnerability chain targeting LiteLLM, one of the most popular open-source AI gateway and proxy servers, has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog with a…
Squidbleed — 29-Year-Old Squid Proxy Memory Leak Has Been Exposing Credentials Since 1997
Summary Security researcher Joshua Rogers has disclosed “Squidbleed” (CVE-2026-47729), a memory leak vulnerability in the Squid web proxy that has existed in the codebase since 1997 — making it 29…
AutoJack — Single Malicious Webpage Hijacks AI Browsing Agent for Full Host-Level RCE
Summary Microsoft researchers have disclosed “AutoJack,” an exploit chain that allows a single malicious webpage to hijack an AI browsing agent and achieve full remote code execution on the host…
FortiBleed — Credentials for 73,000+ FortiGate Devices Dumped in Massive VPN Leak Campaign
Summary A large-scale credential compromise campaign dubbed “FortiBleed” has exposed valid VPN and administrator credentials for over 73,000 internet-facing FortiGate firewalls across 194 countries — roughly half of all reachable…
Trump Signs Executive Orders Accelerating Nationwide Migration to Post-Quantum Cryptography
Summary On June 22, 2026, President Trump signed two executive orders aimed at securing the United States against advanced cryptographic threats posed by quantum computing. The orders mandate an accelerated…