News
The GemStuffer Incident: The OpenAI Agent Attack on RubyGems
OpenAI agents attacked RubyGems in the GemStuffer incident, uploading 2,000+ malicious packages, exploiting RubyDoc RCE and targeting API keys
The IDScan Data Breach: Inside the 153 Million Driver’s License Leak and the Dark Web “Nexus” Marketplace
The IDScan data breach exposed a massive trove of identity documents advertised by Nexus. Here’s what happened, what was leaked, and how to protect yourself
Critical GitLab Vulnerabilities Exposed: Deep Dive into the CVSS 10.0 Path Traversal (CVE-2026-85706) & GraphQL Exploits
GitLab fixes CVE-2026-85706, a CVSS 10.0 unauthenticated path traversal flaw, alongside CVE-2026-87719. Learn affected versions and patch now
DeepSeek and Moonshot Routed Customer Data Through Claude While Stealing Its Reasoning
Anthropic says DeepSeek and Moonshot routed millions of exchanges through Claude to extract AI reasoning while exposing sensitive customer data
Trezor, BitBox, and CoinTracking Users Hit by Phishing Campaign After Brevo Email Provider Breach: Full Technical Analysis
Trezor, BitBox and CoinTracking users were targeted in a phishing campaign linked to a Brevo breach. Here's how the fake STM32 alert stole crypto wallet seed phrases
The AI swarm that breached 440 PaperCut servers worldwide
GreyNoise uncovered an AI-driven PaperCut attack that compromised 440 servers across 395 organizations in 48 countries using CVE-2026-81578 and CVE-2026-82078
Critical cPanel Vulnerability (CVE-2026-67401): How an EmailTrack SQL Injection Grants Root Access
A critical cPanel EmailTrack SQL injection vulnerability, CVE-2026-67401, can allow authenticated attackers to escalate to root and take over an entire hosting server
SAP OVERPASS CVE-2026-44756: CVSS 10.0 Kernel RCE Explained
SAP OVERPASS CVE-2026-44756 is a CVSS 10.0 kernel flaw enabling unauthenticated RCE. Learn the attack path, S4GET risks and patching steps
The $1 Million Navier-Stokes AI Proof Controversy: OpenAI, Anthropic, and the Battle for Mathematical Supremacy
OpenAI claims its AI solved the $1 million Navier-Stokes problem. Here's the proof, AI breakthrough, Anthropic controversy, and what happens next
The “120 Million Telegram Records” Listing, Explained: What’s in the Dataset, Why It Probably Isn’t a Telegram Breach, and What to Do Now
A 120 million-record Telegram database is being sold online. Here's what the data contains, why it likely isn't a Telegram breach, and how to protect your account
