News that matters, without the noise.

New Kimi K3 AI Agent Uncovers 0-Day Exploits in Redis Server

A newly reported research effort tied to the Kimi K3 AI agent has surfaced multiple authenticated remote code

Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses

Hackers recently obtained non-sensitive customer information and other documents from the company. The post Upbound Group Says Data

Nine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installs

RefluXFS, a new Linux kernel flaw disclosed on July 22 and tracked as CVE-2026-64600, lets an unprivileged local

SSB-104599 V1.2 (Last Update: 2026-07-23): Increasing Cyber Threats to Industrial Control Systems

Hackers Breach South Korea’s Diplomatic Academy and Expose Foreign Ministry Staff Data

South Korea’s diplomatic community is facing a serious security incident after hackers breached the Korea National Diplomatic Academy’s

Assaf Keren Appointed New CISO of Meta

He replaces Guy Rosen, who announced his retirement from the company after 13 years. The post Assaf Keren

New msaRAT malware uses Chrome, Edge browsers to route C2 traffic

The Chaos ransomware gang is using a new backdoor dubbed msaRAT that hides command-and-control (C2) communication by routing

Microsoft working to fix Exchange Online mailbox quarantine issue

Microsoft is working to resolve an ongoing Exchange Online issue that has been mistakenly quarantining customers’ mailboxes since

Swiss train maker Stadler refuses Everest $12 million ransomware demand

Stadler Rail said it will not make a $12.3 million ransom payment after cybercriminals stole technical data from

RHSA-2026:42881: Important: OpenJDK 11.0.32 ELS Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a

RHSA-2026:42880: Important: Java 11 OpenJDK ELS Security Update

An update for java-11-openjdk with Extended Lifecycle Support is now available for Red Hat Enterprise Linux 7, Red

CVE-2026-9729

Medium Severity Description The Webpushr Push Notifications plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the