We are B9 and we are here to make sure YOU are not B-10. We are B9 and we are here to make sure YOU are not B-10.
- Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
- OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
- Attackers Hijack Dahua IP Cameras in Ukraine Using P2P Access and Auth Weaknesses
- CISA Confirms Active Exploitation of Two PHP2Shell Flaws Enabling Remote Code Execution
- So Many AI Security Benchmarks, But None Tell the Whole Story
- Risks & Rewards: How AI Is Redefining the CISO's Role
- In-the-Wild Attack Abuses AI Agents' Trust in Markdown
- Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
- 'Gheist' Weaponizes GitHub Tokens to Steal Cloud Secrets
- PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
- Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
- ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More
- 10 Software Security Practices Built for the Next 250 Years
- Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
- Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
- uCreator Android Spyware Can Steal Telegram 2FA Passwords and Clone WeChat Accounts
- Microsoft 365 Token-Replay Attacks Compromise 97 Accounts at 79 Organizations
- Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs
- Malicious File in Downloads Folder Tries to Trick AI Coding Agent Into Installing Malware
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
- PHP2Shell Exploitation Hits Government Entity Amid Global Scanning and Signs of AI-Assisted Hacking
- OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
- Leaked LiteLLM Master Key Let Attackers Steal GitHub Tokens and Hijack Release Pipeline
- Google Says Gmail and Photos Data Shared With AI Search Could Be Used for Targeted Ads
- Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet
