News that matters, without the noise.

CVE-2026-14628

High Severity Description A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function extract_media

CVE-2026-14627

Critical Severity Description A security vulnerability has been detected in NousResearch hermes-agent up to 0.15.2. This affects the

CVE-2025-13475

Low Severity Description In multi-tenanted deployments, the application consent management mechanism fails to correctly isolate consent scopes between

DSA-6377-1 php8.4 – security update

https://security-tracker.debian.org/tracker/DSA-6377-1

Alibaba reportedly bans employees from using Claude Code

Alibaba has reportedly classified Claude Code as high-risk software.

JadePuffer ransomware used AI agent to automate entire attack

Researchers identified what they believe is the first documented case of a ransomware operation, JadePuffer, conducted entirely by

U.S. Government Entity Paid Kairos $1 Million in Data-Theft Extortion Case

A U.S. government entity paid about $1 million to keep stolen files from being leaked, according to a

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages

Security Roundup: Apple’s Hide My Email Service Fails to Hide Your Email

Plus: Alleged Scattered Spider hacking member extradited, dozens of license plate reader errors, and Indian officials are concerned

Ghent University’s Scorpion Hexapod

PamStealer Mimics Maccy Clipboard Manager Silently Harvests Data and Clipboard Contents

PamStealer is a newly identified macOS infostealer that disguises itself as the popular open-source clipboard manager “Maccy” while

Multiple FatFs Vulnerabilities Expose Millions of Embedded Devices to Cyber Risks

Security researchers at runZero have disclosed seven new CVEs affecting FatFs, the ubiquitous lightweight FAT/exFAT filesystem driver used