News that matters, without the noise.

ConsentFix v3 attacks target Azure with automated OAuth abuse

A new attack type, dubbed ConsentFix v3, has been circulating on hacker forums, building on the previous technique

How RAG, GraphRAG, and Context Engineering Improve AI Performance

New Bluekit Phishing Kit Features AI Assistant

Still under development, Bluekit provides users with automated domain registration and an AI Assistant. The post New Bluekit

Disneyland Now Uses Face Recognition on Visitors

Plus: The NSA tests Anthropic’s Mythos Preview to find vulnerabilities, a Finnish teen is charged over the Scattered

CVE-2026-7600

Critical Severity Description A flaw has been found in ArtMin96 yii2-mcp-server 1.0.2. This impacts the function yii_command_help/yii_execute_command of

CVE-2026-7599

Medium Severity Description A vulnerability was detected in Dayoooun hwpx-mcp 0.2.0. This affects the function save_document/export_to_text/export_to_html of the

CVE-2026-7598

Medium Severity Description A security vulnerability has been detected in libssh2 up to 1.11.1. The impacted element is

Huawei’s first laptop to feature a foldable display. Media: @DrHurryish

Attackers Deploy AiTM Phishing Pages to Access SharePoint, HubSpot, and Google Workspace

Threat actors are rapidly shifting their intrusion tradecraft toward high-speed, SaaS-centric attacks that completely bypass traditional endpoint security.

Trellix Confirms Source Code Breach With Unauthorized Repository Access

Cybersecurity company Trellix has announced that it suffered a breach that enabled unauthorized access to a “portion” of

Tune In: The Future of AI-Powered Vulnerability Discovery

Attackers Abuse Google AppSheet, Netlify, and Telegram in Facebook Phishing Campaign

A sophisticated cybercriminal operation dubbed “AccountDumpling” has compromised approximately 30,000 Facebook accounts worldwide. Discovered by Guardio Labs, this