News that matters, without the noise.

AIRecon: AI-Powered Penetration Testing Tool with Kali Linux Sandbox

AIRecon is an autonomous penetration testing agent that runs entirely offline, combining a self-hosted Ollama LLM with a

Critical LiteLLM Flaw Allows Authentication Bypass via Host Header Injection

A critical security vulnerability has been disclosed in LiteLLM, an increasingly popular proxy used for managing large language

Hackers Use Rokarolla Android Malware to Disable Google Play Protect and Control Devices

A newly discovered Android banking trojan called Rokarolla is making waves in the cybersecurity world, and it is

Deno-Based RAT Uses Microsoft Teams Impersonation and Mailbombing to Target Employees

A new strain of malware has emerged that combines two well-known social engineering tactics into one effective attack

Chrome and Firefox Updated to Patch Critical, High-Severity Vulnerabilities

The browser updates address multiple memory safety bugs that could potentially lead to remote code execution. The post

Joomla, LiteSpeed Vulnerabilities Exploited in Attacks

The flaws allow attackers to execute arbitrary PHP code and gain root privileges on shared hosting servers. The

3 Recently Patched Fortinet FortiSandbox Vulnerabilities in Hacker Crosshairs

SOCRadar has detected 30,000 compromised Fortinet firewalls that expose networks to hacking.  The post 3 Recently Patched Fortinet

UK Social Media Ban for Minors Has Privacy Experts Worried

The UK will ban adolescents under 16 years old from user-to-user social-media platforms, despite age-verification issues and privacy

Kodak confirms data breach claimed by ShinyHunters extortion gang

Kodak has confirmed that it’s working with external cybersecurity experts to investigate a security breach after hackers gained

144 Mastra npm Packages Compromised via Hijacked Contributor Account

As many as 144 npm packages associated with the Mastra namespace (“@mastra/*”), a popular open-source JavaScript and TypeScript

ISC Stormcast For Wednesday, June 17th, 2026 https://isc.sans.edu/podcastdetail/9976, (Wed, Jun 17th)

Hackers Using Claude and OpenAI’s Codex for Exploitation, and Data Exfiltration Activities

Hackers are increasingly abusing Anthropic’s Claude and OpenAI’s Codex agents to automate reconnaissance, exploitation, and data exfiltration, often