News that matters, without the noise.

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands

Splunk, Zoom Patch Critical Vulnerabilities

The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges. The

CISA orders feds to patch actively exploited Oracle flaw by Saturday

CISA has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability

Russian hackers trojanize WebEx, Zoom apps to push Starland malware

A financially motivated Russian threat actor tracked as UAT-11795 is using trojanized software to steal credentials and cryptocurrency

New Spirals ransomware encrypts victim network in under 24 hours

A new ransomware actor called Spirals completed a corporate intrusion, from initial access to data theft and encryption,

Will your next package be delivered by a robot dog? ⤵️

Cyberattack on Japan’s largest cold-chain operator disrupts KFC, supermarket supplies

Kentucky Fried Chicken restaurants have been left short on ingredients and major restaurant chains struggling to keep up

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

In this article Attack chain overview How the attack started: GitHub Actions pwn request Mitigation and protection guidance

SANS Warns of AI Governance Gap as Use by Security Teams Surges

SANS Institute says governance programs are still nascent even as AI failures and threats grow

GPT-Red – A Red Teamer to Find Prompt Injection Vulnerabilities in GPT 5.6 Sol

OpenAI has introduced GPT-Red, an internal automated red-teaming model designed to identify and remediate prompt injection vulnerabilities in

Kratos PhaaS Attacking Microsoft 365 Users Across the US, Europe to Steal Credentials

Kratos is a phishing-as-a-service operation built to steal Microsoft 365 credentials. It is targeting organizations across the United

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities

Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and