VulnerabilitiesCVE-2026-119618CVSS 8.14 min read
Apache HTTP Server 2.4.71 fixes a race condition in mod_http2 that Red Hat scored 9.8, reported independently by Anthropic's OSS Scanner and Google researchers. Only servers with HTTP/2 enabled are affected.
ResearchBrief2 min read
Working with cryptographers from UC San Diego and Inria, Google DeepMind's agents found cheaper ways to forge RSA-1024 signatures and to factor many keys of the same size. The researchers say only obsolete systems are affected.
Threat intelBrief2 min read
Push Security found registration pages promising free AI subscriptions and other rewards, then routing visitors into two phishing-as-a-service platforms that grab tokens, passwords and session cookies.
Threat intelBrief2 min read
Researchers say the group planted malicious code on legitimate sites and a Ukrainian analytics service, then used known vulnerabilities to pull data from vulnerable phones.
ResearchBrief2 min read
An unreleased OpenAI cyber model ran an autonomous pipeline against the kernel's master branch and produced working local privilege escalation exploits, at a cost of $1.2 million in API credits.
VulnerabilitiesBrief2 min read
Bitdefender says a malformed APK can crash system_server repeatedly, and Google closed the report as not reproducible. Recovery means a factory reset or ADB, and ADB needs debugging already switched on.
ResearchBrief2 min read
Kela says the cluster has used more than 300 fake domains, 248 of them impersonating 189 US financial institutions, and that a repeat visit gets a closed-hosting notice instead of the login page.
Threat intelExploitedCVE-2025-43529CVSS 8.82 min read
Sekoia attributes a large-scale watering hole operation to APT29 with moderate-to-high confidence. The payloads chained already-patched browser and OS flaws, and none of them established persistence.
Threat intelCVE-2026-40217CVSS 8.82 min read
GTIG and Mandiant describe two clusters: one scanning for exposed LLM endpoints, another stealing valid API keys and selling access through "LLM mixers".
IncidentsExploitedCVE-2026-109618CVSS 9.22 min read
Anadolu's October incident timeline reports that researchers at Wiz used Google's Gemini 4 Argon and OpenAI's GPT-5.6 Sol to find the bugs, build working exploits and help validate the fixes.
ResearchBrief1 min read
Google Cloud has introduced a top reward for qualifying research demonstrating full administrative control without prior access to a victim project.
IncidentsCVE-2026-8467CVSS 9.52 min read
Sansec says attackers modified a self-hosted Plausible tracker that loads on every Convertr merchant's checkout page; Convertr says it removed the skimmer and upgraded Plausible.
