4+ day, 6+ hour ago   (745+ words) Check Point researchers found a ChatGPT flaw that let attackers run hidden tasks and retrieve connected Gmail data through a cross-account channel. The more access you give ChatGPT, the more an attacker can work with if they trick the AI…...

5+ day, 10+ hour ago   (646+ words) Samsung’s September 2026 security update lists fixes tied to 90 vulnerabilities, including critical Android and Galaxy flaws. Samsung is starting September with another major security cleanup for Galaxy users. Samsung’s September 2026 security bulletin lists fixes tied to 90 vulnerabilities across Google, Samsung Semiconductor,…...

5+ day, 14+ hour ago   (595+ words) Liquid Network hackers returned 3,400 BTC after draining $320 million from its federation wallet, but about $47 million in Bitcoin remains outstanding. Liquid Network just watched roughly $320 million in Bitcoin walk out of the wallet backing its network, and those behind the drain…...

2+ week, 5+ day ago   (705+ words) Kaspersky uncovered malware spreading via software updates on Android-based car head units, turning infected systems into proxy nodes in a botnet. Your car’s software update is supposed to fix problems, not quietly recruit its infotainment system into a botnet. Kaspersky…...

2+ week, 6+ day ago   (447+ words) Attackers are finding new ways through familiar technology. Today’s threats reach identity platforms, mobile devices, and WordPress sites. Read past newsletters here. Microsoft Fixes Entra ID RCE Flaw Used in Attacks Microsoft patched a maximum-severity Entra ID flaw exploited for…...

3+ week, 2+ day ago   (517+ words) Some threats call for patches. Others call for cutting the cable. Today’s news spans over 900 Oracle patches, exposed gateways, evolving infostealers, AI hitting the brakes, and a telecom defense that took “disconnect the threat” quite literally. Read past newsletters here....

3+ week, 3+ day ago   (417+ words) Several of the critical WebLogic Server flaws could allow remote attackers to compromise vulnerable systems without authentication. Several of the most critical fixes affect Oracle WebLogic Server, where remotely exploitable vulnerabilities could compromise business critical applications and sensitive data. CVE…...

3+ week, 3+ day ago   (947+ words) Apple patched critical iPhone flaws that could allow malicious code execution, including an ImageIO vulnerability. Here’s what users should know. A newly patched Apple security flaw could let attackers execute malicious code when an iPhone or iPad processes an image....

3+ week, 5+ day ago   (722+ words) Microsoft’s August Patch Tuesday fixes about 400 security flaws, including an actively exploited Windows zero-day and multiple 9.8-rated RCE bugs. Microsoft released patches for over 400 CVEs this Patch Tuesday, including one actively exploited zero-day and several critical remote code execution flaws…...

3+ week, 6+ day ago   (458+ words) Philips and GE are investigating Clop data theft claims potentially linked to a PTC vulnerability. Philips and General Electric (GE) are investigating incidents after the Clop ransomware group claimed to have stolen data from both companies. The companies are among…...