ARTEX AI Agents Steal App-Signing Certificates
Check Point traced ARTEX agents stealing 300+ app-signing certificates. Only three passed…
Haiou Turns a Codex Greeting Into a Gateway Ad
Check Point traced persistent gateway ads to Haiou’s global agent instructions. A…
CyberStrikeAI Directed Intruders From SQL Server to Domain Admin
A server-side AI helped attackers navigate educational networks, steal credentials and collect…
Ukraine Air Alert Hack Sent False Warnings; Service Partly Restored
Ukraine’s Air Alert team confirms interference, pauses push, then partly restores service.…
Cyberattack Hits French Supermarket Refrigeration
Coopérative U confirms refrigeration disruption. CERT-FR warns of compromised Danfoss AK-SM and…
Cisco Email Gateway Attacks Turn a Message Into Root Access
Cisco confirms attacks on its email gateway. Check fixed AsyncOS releases and…
N-central CVE-2026-18577: Patch and Hunt for Cloudflared
N-central needs HF4 build 2026.3.1.14. Check appliance accounts and API logs, then…
Operation BlueDash Uses Fake Teams Updates for Remote Access
Operation BlueDash turns a secure-document email into a fake Teams update that…
CVE-2026-16812 Exploited in VeloCloud Orchestrator
Arista confirms active exploitation of CVE-2026-16812 in VeloCloud Orchestrator On-Prem. Check affected…
OpenAI Agent Hacked Hugging Face—and Went Unnoticed for Days
An OpenAI evaluation agent reached Hugging Face production while pursuing benchmark answers.…
npm Staged Publishing: What Maintainers Should Change Now
npm CLI 11.15.0 adds staged publishing and new install-source controls. Here is…
LiteSpeed cPanel Plugin CVE-2026-48172 Exploited for Root Scripts
LiteSpeed says CVE-2026-48172 is being actively exploited in its user-end cPanel plugin.…