Atlassian's Rovo AI Vulnerability Risks Enterprise Data Exposure
PremiumVaronis found a one-click RovoBlast vulnerability that could expose Confluence, Jira and SharePoint data to attackers.
§The archiveMon · Wed · FriM · W · F
News.
Every dispatch we've sent. AI-curated, human-reviewed, from 50+ cybersecurity sources.
Follow on LinkedInBrowse by topic
Monday, August 10
CSS Bomb Attacks Exploit Email Vulnerabilities to Steal Passwords
PremiumCSS bomb technique manipulates webmail UI to spy on user activity and capture passwords and tokens without JavaScript.
Levi Strauss Hit by Social Engineering Cyberattack
PremiumLevi Strauss suffered a breach after social-engineering of three employees gave attackers access to internal systems and data.
Military Device Manufacturer Faces Cybersecurity Breach
PremiumIEH Corporation disclosed a cyberattack affecting systems tied to military device manufacturing in an SEC filing.
Exposed OT Controllers and Foreign Telecoms Pose Persistent Security Risks
PremiumSANS NewsBites flags exposed OT controllers after water attacks, Chinese telecoms' US presence, and OSAA's SAFE proposal for AI findings sharing.
Massive Data Breach at Unlimited Technology Systems Exposes Personal Information of Millions
PremiumUnlimited Technology Systems breach exposed personal, medical and health insurance information for about 3.8 million people.
Phishing Campaign Exploits Microsoft 365 Accounts in Financially Driven Attacks
PremiumActive AitM phishing campaign hijacks Microsoft 365 accounts to collect payroll and finance emails using residential proxies.
Cyberattack Disrupts Operations at North Carolina Ports
PremiumCyberattack disrupted gates and operations across three North Carolina ports, drawing Coast Guard attention.
N-able Enhances Security with New N-central Hotfix Amid Exploitation Concerns
PremiumN-able released hotfixes after active exploitation of N-central enabled persistent attacker access to managed systems.
Google Chrome 151 Update Resolves Critical Security Flaws
PremiumChrome 151 fixes multiple memory-safety bugs, including critical use-after-free issues — prioritize browser updates.
Critical Metabase Vulnerability Exploited to Gain Unauthorized Access
PremiumCritical Metabase SQLi zero-day allows unauthenticated admin access and active data-theft; immediate mitigation required.
Friday, August 7
ChainDrop Worm Infiltrates Hundreds of npm Packages, Threatens Billions of Installs
PremiumChainDrop npm worm compromised 400+ packages, impacting components with combined monthly installs exceeding two billion.
QuickFox Supply Chain Breach Unveils FDMTP Backdoor Deployment
PremiumQuickFox supply-chain compromise trojanized Windows installer to deliver FDMTP backdoor in deployments since at least August 2025.
Critical Vulnerability in Popular Code Editors Puts Millions at Risk
PremiumCritical one-click RCE affecting Cursor, VS Code, and Google Antigravity could compromise developers by executing code via malicious links.
Security Researcher Uncovers Vulnerability in ChatGPT's Sandbox Environment
PremiumResearcher demonstrated a PoC providing C2-style influence over ChatGPT's isolated sandbox, highlighting container escape risks.
AI Coding Agents Expose Critical Vulnerabilities
PremiumRepeatable vulnerabilities across Anthropic, Google, and OpenAI coding agents allow RCE, API credential theft, and supply-chain compromise.
AI Browsers Under Siege: Zero-Click Vulnerabilities Threaten ChatGPT Atlas and Claude
PremiumZero-click prompt injection vulnerabilities let attackers hijack Claude and ChatGPT Atlas via crafted emails and social posts, unpatched as reported.
Severe Paperclip Flaw Exposes Admin Access and Code Execution Risks
PremiumCritical Paperclip flaw allowed unauthenticated admin access and code execution via board-level API and company import feature.
SQL Injection Exploited in Oracle Database for SYSTEM-Level Access
PremiumAttackers used SQL injection to compile khunt toolkit inside Oracle DBs, executing post-exploitation tasks without writing executables to disk.
Critical Security Flaws Fixed in AWS, Google, and Vercel Tools
PremiumAgent infrastructure flaws at AWS, Google, and Vercel allow forged instructions to invoke agent tools without model authorization, bypassing guardrails.
Get these articles delivered to your inbox.
Subscribe free