Cyberattack on French Grocers Highlights Risks of Unpatched Refrigeration Systems
PremiumHundreds of grocery stores lost millions after third-party-managed, outdated OT fridge firmware caused failures and outages.
Friday, October 16
Critical Bug in Claude Code Desktop Exposes Sensitive Developer Credentials
PremiumAnthropic SneakPeek bug in Claude Code Desktop preview pane can silently exfiltrate SSH keys, AWS credentials and OAuth tokens.
CISA Alerts on Ivanti and Microsoft Vulnerabilities Amid Record Patch Tuesday
PremiumCISA issues warning about newly exploited Ivanti vulnerability while Microsoft ships record-breaking Patch Tuesday fixes.
Security Experts Use AI to Develop Chrome Exploit in Record Time
PremiumResearchers used a public GPT-5.6 model to craft a full-chain Chrome exploit in six days, leading Google to patch three bugs.
AI Agent Uncovers Critical OTP Bypass Vulnerability in Major Insurer's Website
PremiumAn AI pentesting agent autonomously discovered a critical OTP routing bypass in a live insurer site, enabling account takeover.
Ivanti Connect Secure Faces Exploitation of Critical Zero-Day Vulnerability
PremiumBSI warns multiple Ivanti Connect Secure zero-days are being actively exploited, enabling auth bypass and remote code execution.
Critical Windows Shell Vulnerability Patched Amid Active Exploitation
PremiumMicrosoft patched actively exploited Windows Shell zero-day CVE-2026-96951 that bypasses Mark of the Web protections (CVSS 8.8).
Critical Vulnerability in Collabora Exploited to Compromise Nextcloud Servers
PremiumAttackers exploited Collabora Online CODE Server RCE (CVE-2026-110447) to plant web shells and backdoor Nextcloud servers.
Ad-Delivered Spyware Campaign Targets Al Jazeera Devices
PremiumCitizen Lab documents ad-delivered zero-click spyware campaign infecting 45 Al Jazeera devices via background ads.
Critical Flaw in ChatGPT's GitHub Integration Exposes Private Repository Secrets
PremiumCritical ChatGPT GitHub integration flaw could be manipulated to modify private repos and exfiltrate repository secrets via Actions.
Burger King Japan Data Breach Impacts Millions of App Users
PremiumBurger King Japan breach exposed roughly 11.18 million app member records after unauthorized access to membership systems.
Microsoft Cripples Global Phishing Network Responsible for Over a Billion Scams
PremiumMicrosoft disrupted a Chinese-language phishing ecosystem (Yam Store) responsible for over one billion scam messages.
Ivanti's Zero-Day Challenge: Navigating Vulnerability Management
PremiumIvanti ICS zero-day CVE-2026-104935 highlights incomplete patches and operational obstacles leaving ICS environments exposed to RCE.
Data Breach at CenterPoint Energy Exposes Over 1 Million Texans' Personal Information
PremiumCenterPoint Energy breach exposed names, addresses, SSNs and driver license numbers of roughly one million Texas residents.
Drupal Addresses Critical Security Vulnerability in Field UI Module
PremiumDrupal Field UI core flaw enables unauthenticated remote code execution via contributed modules; patches released for Drupal 10/11.
AdFection Spyware Exploits Digital Ads for Covert Surveillance
PremiumAdFection zero-click spyware delivered via targeted ads infects devices without user interaction, affecting news organizations.
Historic Data Breach Hits UK Legal Aid Agency
PremiumLegal Aid Agency breach exposed records dating back to 1978, expanding scope to hundreds of thousands of historic records.
Zero-Click Spyware Targets Al Jazeera Through Online Ads
PremiumCitizen Lab links powerful zero-click spyware infections at Al Jazeera and others to targeted online ads needing no user interaction.
Microsoft Sets New Record with Patch Tuesday, Addressing Over 1,400 Vulnerabilities
PremiumMicrosoft released fixes for 1,413 vulnerabilities including an actively exploited Windows Shell zero-day; prioritize high-severity updates.
Palo Alto Networks Urges Immediate Patching for Critical PAN-OS Vulnerability
PremiumPAN-OS authenticated RCE (CVE-2026-0322) observed in limited exploitation against firewalls; immediate patching urged.
Get these articles delivered to your inbox.
Subscribe free