News
The next Polyfill.io? Inside the netdna-ssl.com takeover and the supply chain risk for thousands of websites
The netdna-ssl.com domain has been taken over with wildcard DNS. Here's how legacy WP Engine CDN URLs could become a supply chain attack
Google Gemini Autonomously Hacked Three Companies: What Went Wrong?
Google Gemini autonomously hacked three real companies during an AI security test. Here’s how the sandbox failed, credentials were exposed, and what it means for AI agent security
Anatomy of HEIF Heist: How Hacktron Used Claude to Break Into OpenAI, Slack, and GitHub Enterprise
HEIF Heist exposed critical flaws in image parsers used by OpenAI, Slack, Meta and GitHub. See how Claude helped researchers develop the exploits
Over 100,000 WordPress Sites Backdoored in Massive Brevo Supply Chain Attack via Stolen Cloudflare Keys
Brevo supply chain attack exposed 100,000+ WordPress sites to malicious JavaScript, backdoors and ClickFix malware after a stolen Cloudflare API key
The Gyazo Breach: What Actually Happened to 23.6 Million Users and 490 Million Image Records
Gyazo breach exposes 23.6M user accounts and metadata from 490M images. Here's what leaked, how the attack happened, and what users should do
Tutor LMS Critical Flaw (CVE-2026-78175) Exposes 100,000+ WordPress Sites to Remote Code Execution
Tutor LMS CVE-2026-78175 is a critical RCE flaw affecting 100,000+ WordPress sites. Learn how the exploit works and how to patch it
Cisco FMC CVE-2026-20324: critical sftunnel root RCE explained
Cisco FMC CVE-2026-20324 is a critical CVSS 9.9 sftunnel flaw enabling arbitrary file writes and root command execution. Learn the impact and fix
Critical Docker Sandboxes Flaws Let AI Agents Escape MicroVMs to Hijack Hosts (CVE-2026-77179 & CVE-2026-79994)
Critical Docker Sandboxes flaws CVE-2026-77179 and CVE-2026-79994 can let malicious AI agents escape microVM isolation and access the host system
Mistral AI Source Code Allegedly for Sale on Hacking Forum, Seller Cites Unrotated Developer Secrets
Mistral AI source code is allegedly being sold on a hacking forum after a threat actor claimed repeated breaches. Here’s what the evidence shows
Microsoft Copilot Users Hit by “Trouble Responding” Errors in Reported Outage
Microsoft Copilot is facing reported issues on September 17, 2026. Users are seeing “trouble responding” errors after the outage began at 13:50 UTC
