Critical vm2 sandbox bug lets attackers execute code on hosts
…The security issue is tracked as CVE-2026-26956 and has been confirmed to impact vm2 version 3.10.4, although earlier releases may also be vulnerable. Proof-of-concept (PoC) exploit…
Search
Texas govt data breach exposes over 3 million driver’s licenses
…The state authority found that Social Security Numbers (SSNs), dates of birth, or any financial information, such as credit cards, have not been impacted. However, the threat actor may have obtained personally…
California AG sues 23andMe over 2023 breach exposing health data
…Improper security led to a high-profile data breach in 2023 that exposed the sensitive information of nearly 7 million customers, including 855,541 Californians. The incident came to light that year…
Microsoft adds smarter bot protection to Teams meetings
…The policy gives organizations more control and visibility over external bots in their meetings, helping them identify bots more easily and adding safeguards designed to ensure that only the intended participants and…
Instagram users locked out after Meta AI abused to steal accounts
…After changing the email address, the attacker could initiate a password reset process and receive the required security code for gaining access to the account. Some online reports claim that the @e…
Claude Fable relaunch disappoints users with nerfed performance
…Another developer claimed the model was unusable for some systems-level coding work, saying that C, C++, Rust, Win32 API references, memory-related work, and files mentioning words like "security," "vulnerable," "unsafe…
Hacker claims 3.6 million Azure account records stolen from major companies
…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…
OpenClaw AI agent found falling for phishing attacks, spills user data
…Researchers at security firm Varonis created an OpenClaw agent and connected it to a Gmail inbox, browser tools, Google Workspace APIs, and fabricated internal company data sources, instructing it to monitor and…
An AI SOC Evaluation Guide for Security Leaders
…probabilistic AI handles triage and investigation while deterministic safeguards and humans in and on the loop govern containment, escalation, and irreversible actions. Prophet Security is an agentic AI SOC platform that autonomously…
OpenAI models used Artifactory zero-days to escape to the internet
…The models were run without production safeguards normally used to prevent AI agents from conducting autonomous cyber activity. However, the agents were placed inside a highly isolated environment where network access was…