News that matters, without the noise.

CVE-2026-65311

Medium Severity Description The HTTP server component of ANDRITZ HIPASE-250 (formerly 250 SCALA) in affected versions exposes an

CVE-2026-65310

High Severity Description ANDRITZ HIPASE-250 (formerly 250 SCALA), in the default configuration of affected versions, exposes its data

BlackTech APT Deploys BlueShell Linux Backdoor Against Japanese Organizations

BlackTech has been linked to a newly examined Linux backdoor deployment against organizations in Japan, showing how a

Facial Recognition at Madison Square Garden

Last month, the story broke (alternate link) that Madison Square Garden uses facial recognition software on everyone entering

The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version

Analysis of XCSSET v40 reveals a macOS malware targeting developers via Xcode. Unit 42 used advanced pattern matching

AWS Blames North Korean Group for Axios and Other npm Supply Chain Attacks

AWS has linked North Korea to the axios campaign to other attacks on npm libraries

Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace

The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase. The post Google AI

AI Security Costs Rise: Cost of a Data Breach Report & Claude Opus 5

The New Defcon Badges Pack a Unique Open Source Chip That Doubles as a Security Key

Created by legendary hardware hacker Andrew “bunnie” Huang, the badges for this year’s famed security conference aim to

zipdump.py: Metadata Encoding, (Fri, Jul 31st)

I was asked for help with a problem similar to the following.

SSH Bot Profiles Linux CPU, GPU and RAM Before Deploying Cryptocurrency Miner

A new SSH bot has been caught quietly logging into Linux systems, profiling their CPU, GPU, and memory,

DeepSeek-Powered Hermes Agent Launches Autonomous Cyberattacks Against Exposed Servers

A Chinese-speaking threat actor used an AI-driven agent to search for vulnerable internet-facing servers and begin attacks with