News that matters, without the noise.

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

Cybersecurity researchers have disclosed details of a new threat actor dubbed Lurking Lizard that has been operating an

Palo Alto PAN-OS Vulnerability Allows Arbitrary Code Execution Through Malicious Network Traffic

Palo Alto Networks has disclosed a high-severity vulnerability in PAN-OS that could allow unauthenticated attackers to execute arbitrary

CVE-2026-59723

High Severity Description Cline is an autonomous coding agent as an SDK, IDE extension, or CLI assistant. Prior

CVE-2026-54784

High Severity Description CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET

CVE-2026-54783

High Severity Description CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET

Claude, Cursor, and Codex Trigger Endpoint Security Rules Used to Catch Hackers

AI coding agents such as Claude Code, Cursor, and OpenAI Codex are increasingly appearing in enterprise environments, and

_HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_ [Guest Diary], (Tue, Jul 7th)

[This is a Guest Diary by Jason Callahan, an ISC intern as part of the SANS.edu BACS program]

DSA-6385-1 pgextwlist – security update

https://security-tracker.debian.org/tracker/DSA-6385-1

[Wireshark-announce] Wireshark 4.6.7 released

PromptSpy Android Malware Uses Google Gemini to Adapt During Runtime Execution

A newly identified strain of Android spyware called PromptSpy has become the first mobile malware known to call

APT-C-20 Hackers Hide Shellcode in PNG Images to Launch Fileless C# Backdoor

A well known hacking group has found a clever way to sneak malicious code past security tools, using