News that matters, without the noise.

Cursor AI Extension Access Developer Tokens Leads to Full Credential Compromise

A high-severity access-control vulnerability (CVSS 8.2) in Cursor, a widely used AI-powered coding environment. The flaw uncovered by

RHSA-2026:12033: Important: gvisor-tap-vsock security update

An update for gvisor-tap-vsock is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat

RHSA-2026:12030: Important: buildah security update

An update for buildah is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat

RHSA-2026:12031: Important: runc security update

An update for runc is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat

CVE-2026-7469

Critical Severity Description A vulnerability was detected in Tenda 4G300 US_4G300V1.0Mt_V1.01.42_CN_TDC01. This impacts the function sub_425A28 of the

CVE-2026-7468

Medium Severity Description A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an

CVE-2026-7447

Medium Severity Description A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects

[Wireshark-announce] Wireshark 4.6.5 released

RHSA-2026:11813: Important: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat

Danger of Libredtail [Guest Diary], (Wed, Apr 29th)

[This is a Guest Diary by James Roberts, an ISC intern as part of the SANS.edu BACS program]

Claude Mythos Fears Startle Japan’s Financial Services Sector

Global financial institutions are panicked over Anthropic’s new superhacker AI model. Cyber experts aren’t quite as worried.

Official SAP npm packages compromised to steal credentials

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to