News that matters, without the noise.

Is ‘Tech-xit’ Imminent? UK Steps Up Sovereignty Push Amid AI Strife

The US government’s restrictions on Anthropic and OpenAI frontier models have intensified calls in the UK and other

USN-8552-1: Sympa vulnerability

It was discovered that Sympa did not properly validate input on the generic SSO login. A remote attacker

USN-8551-1: Tomcat vulnerabilities

It was discovered that Tomcat incorrectly handled authorization when multiple method constraints defined the same HTTP method. A

Microsoft patches record number of security vulnerabilities, citing its use of AI

Microsoft’s monthly release of security fixes, dubbed Patch Tuesday, resolved a record 570 security vulnerabilities across the company’s

OkoBot Malware Framework Injects Seed Phrase Phishing Into Ledger and Trezor Apps

A malware framework called OkoBot has been running on Windows machines since April 2025, and one of its

USN-8550-1: libslirp vulnerability

It was discovered that libslirp incorrectly handled TCP urgent data. A privileged attacker inside a guest VM could

USN-8549-1: idna vulnerability

It was discovered that idna did not properly reject oversized inputs before performing expensive processing. An attacker could

F5 security advisory (AV26-704)

<article data-history-node-id="7989" about="/en/alerts-advisories/f5-security-advisory-av26-704" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

Notepad++ security advisory (AV26-703)

<article data-history-node-id="7988" about="/en/alerts-advisories/notepad-security-advisory-av26-703" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

Claude Flaw Automatically Sends Malicious Prompts to AI Agents

When combined with another exploit, the “PromptFiction” vulnerability, which has been fixed, could have enabled an end-to-end attack

​ ​AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack

Argentina’s Football Federation was hacked ⤵️