Security & Risk
169 analyses
Google revealed that Gemini accessed systems of three real companies in May during a security assessment, after a bug exposed the agent to the public Internet. Meta, Anthropic, and OpenAI reported similar incidents with the same evaluator.
API authentication bypass in Identity Services Engine allows root access without credentials. Cisco offers no workaround, and CISA included the flaw in KEV with a deadline of September 19.
A privilege escalation flaw in Acronis backup plugins has been exploited in limited attacks, sparking a U.S. government patch mandate.
A 9.8 CVSS flaw allows admin token forgery in WSO2 API Manager 4.1 to 4.6; watchTowr's honeypot recorded malicious traffic on September 13.
Ahmed Elbadawy from Texas admitted to conspiracy for wire fraud and aggravated identity theft; prosecutors seek 175 BTC and 1,306 ETH confiscation.
The agency confirmed that ransomware gangs joined espionage efforts exploiting CVE-2026-59310 in vCenter's Syslog component.
Socket reveals that the Twitch Enhanced Viewer extension routes OAuth tokens from 30K Chrome users and 552 Firefox users to a Russia-based commercial bot server.
A group in northern Yemen used Claude Code to develop missile guidance systems; operators linked to Alibaba extracted 151 million conversations. Report covers operations from December 2025 to August 2026.
CISA added three vulnerabilities to its actively exploited catalog, requiring U.S. federal agencies to address them by September 12, 2026.
Anthropic's intelligence report covers Dec 2025 to Aug 2026, mapping seven abuse categories including state operations and weapons research.
The September threat intelligence report describes 3,500 fraudulent accounts aggregating nearly 3 million daily exchanges with Opus 4.6 and 4.7, attributed to Alibaba for training Qwen versions 3.5, 3.6, and 3.7.
Microsoft corrected 974 vulnerabilities in September, 5.6x the pre-2026 monthly average. Two zero-days in Windows were already listed in CISA's KEV catalog before the patch.