#vuln

Fake security tools on GitHub push backdoors and infostealers↗

bleepingcomputer.com Nov 6, 2026 vuln malware privacy cti dlp notes
The extension you never installed: KREMLIN forges Chrome's own integrity checks to steal banking sessions↗

elastic.co Nov 6, 2026 vuln malware identity privacy chrome-extension browser cti dlp notes
M365 Token Spray and Replay Campaign Compromises Business Email Accounts↗

huntress.com Nov 6, 2026 cloud incident vuln identity privacy cti detection campaign-compromises notes
Cybersecurity Dive: Hackers could poison AI models by tampering with core infrastructure↗

eclypsium.com Nov 6, 2026 vuln ai notes
Vulnerability Discovery and Exploitation Trends in the AI Era↗

cloud.google.com Nov 6, 2026 research vuln ai notes
ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft↗

cloud.google.com Nov 6, 2026 appsec incident vuln apt ransomware cti cve-2026-35273 shinyhunters unc6240 campaign-targeting notes
MadApe: The Code That Opens the Door↗

group-ib.com Nov 6, 2026 research cloud vuln identity cti tooling notes
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users' Computers↗

thehackernews.com Nov 6, 2026 appsec cloud vuln malware ai chrome-extension browser notes
mSecure password manager hack prompts password reset warnings↗

bleepingcomputer.com Nov 6, 2026 appsec incident vuln identity privacy dlp notes
How Adversaries Are Turning the Vulnerability Ecosystem Against Defenders↗

crowdstrike.com Nov 6, 2026 vuln notes
Backporting security fixes at scale with Codex↗

blog.trailofbits.com Nov 6, 2026 vuln ai tooling notes
Microsoft Paint RCE Fix Now Available, but Windows Update Won't Deliver It↗

thehackernews.com Nov 6, 2026 appsec vuln cve-2026-83844 notes
Managed for Malice: How Attackers Turn MDM into Remote Access↗

huntress.com Nov 6, 2026 research vuln malware cti notes
Threat actors use agentic AI tooling to find and abuse exposed secrets↗

microsoft.com Nov 6, 2026 appsec cloud vuln identity ai privacy artex cti tooling notes
Making HTTP header injection critical with one prompt↗

portswigger.net Nov 6, 2026 appsec research vuln tooling notes
Camera Management Software Compromise Leads to Malware Deployment↗

huntress.com Nov 6, 2026 research incident vuln malware cti detection notes
Critical Rails Bug Threatens to Derail Vulnerable Servers

darkreading.com Nov 5, 2026 appsec vuln privacy supply-chain notes
Windows Exploitation Techniques: Dangling COM Object Registrations

projectzero.google Nov 5, 2026 research vuln cve-2026-66804 cve-2026-50343 notes
Truffle Security launches program to revoke 1.4 million live secrets

bleepingcomputer.com Nov 5, 2026 appsec vuln identity privacy tooling dlp notes
OpenSSH flaw lets attackers log into password-disabled Linux accounts

bleepingcomputer.com Nov 5, 2026 appsec vuln identity supply-chain notes
Prediction Markets Emerge as a New Vertical for Traffer Teams

recordedfuture.com Nov 5, 2026 vuln cti notes
How to fix a bug in a fix

projectzero.google Nov 5, 2026 appsec vuln notes
Scalable Vector Grief

portswigger.net Nov 5, 2026 appsec research vuln browser notes