Your ISP-Issued Router Let the Internet Rewrite Its Firewall.
A critical, unpatched flaw in a Calix ISP-issued gateway lets unauthenticated internet users create persistent port forwards that expose devices inside the home network.
The AI Platform Was the Door. The Cloud Identity Was the Prize.
Attackers are exploiting MLflow CVE-2026-64849 to turn exposed AI engineering services into a route to cloud metadata, internal systems and workload identity.
Patching SharePoint Did Not Revoke the Keys Attackers Had Already Stolen.
A critical SharePoint deserialization flaw is under active exploitation. Applying the security update closes the entry point, but stolen machine keys can preserve attacker access unless recovery goes further.
Patching the Mail Server Is the First Step. Now Check Whether You Were Already Hit.
CISA has added actively exploited Zimbra CVE-2026-73570 to its KEV catalogue with a 24 August deadline. Patch to 10.1.20, then check for prior compromise.
The Image Was Generated Locally. Its Identifier Came From Microsoft.
Microsoft Paint and Photos embed server-issued identifiers into locally generated AI images, joining remote moderation, pixel watermarking and C2PA provenance.
Chrome Patched a Critical Chromoting Use-After-Free. Verify the Running Build.
Chrome 151 fixes a critical Chromoting use-after-free and six high-severity flaws. Google has not reported exploitation, so the immediate task is to verify that staged updates reached every managed endpoint.
An EU Data Order Can Now Cross Borders Directly. The Provider May Have Eight Hours.
The EU e-Evidence Regulation makes cross-border data orders an eight-hour operational challenge for service providers, not merely a legal process.
France Thought It Had a Staff-Data Breach. The Same Incident May Have Reached Millions of Students.
France’s Education Ministry is testing whether a breach first described as staff-only reached student records across a fragmented national data estate.
LegacyHive Was Public for a Month Before Microsoft Gave It a Patch and a CVE.
A public LegacyHive proof of concept exposed a Windows privilege-escalation path after July's updates. Microsoft patched it in August, showing how public research can compress the defender's window.
The Package Worked. A Single Import Started RedC2’s Linux Backdoor.
Fourteen functional npm utilities launched a native Linux backdoor when imported, bypassing install-hook defences and giving RedC2 an AI-assisted post-exploitation path.
AliExpress Wasn’t Playing Audio. It Was Measuring Your Browser.
AliExpress's homepage ran silent WebAudio processing as part of a broader device fingerprint. A Bluetooth malfunction exposed what ordinary browser controls did not.
The Attack Was Stopped at the Edge. The University Still Had to Delay the Semester.
UT San Antonio says an intrusion attempt was stopped before core systems, yet precautionary shutdowns disrupted services and delayed fall classes.