We are B9 and we are here to make sure YOU are not B-10. We are B9 and we are here to make sure YOU are not B-10.
- Critical Pre-Auth RCE in Orkes Conductor Workflow Platform Exploited in the Wild
- Google Gemini Broke Into Real Company Systems After Security Test Domain Mix-Up
- CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
- CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild
- Vectra AI Launches Ascent to Help Address New Era of AI-Driven Attacks
- Cisco Zero-Day Highlights API Endpoint Authentication Issues
- EY Survey Finds Autonomous AI Implementation Outpaces Oversight
- MFA Won't Save You From OAuth Consent Abuse
- Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
- New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
- New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
- Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
- Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
- An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
- Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
- WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
- Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
- AI Agent Breaches Spanish Organization, Modifies Personal Data
- RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
- CISA Ditches Weekly Vulnerability Roundups for Risk-Based Focus
- China's FamousSparrow APT Spies on US Politics in Latin America
- Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
- ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
- [Virtual Event] Cybersecurity Outlook 2027
- Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
