1. Researchers used Claude Opus 5 to chain vulnerabilities and gain unauthorized access to OpenAI staff accounts and internal code repositories (thehackernews.com).
2. SolarWinds released patches for a high severity hard coded key vulnerability in Access Rights Manager tracked as CVE 2026 28326 (thehackernews.com).
3. A critical pre authentication remote code execution vulnerability in Orkes Conductor tracked as CVE 2026 58138 is being actively exploited in the wild (thehackernews.com).
4. CISA added three Linux kernel vulnerabilities to its Known Exploited Vulnerabilities catalog due to active exploitation in the wild (thehackernews.com).
5. The North Korean hacking group WaterPlum compromised at least 30000 devices worldwide to steal over 10.7 million dollars in cryptocurrency (bleepingcomputer.com).
6. ShinyHunters breached the Clop ransomware gang data leak site and stole server data along with private keys (bleepingcomputer.com).
7. BragJack attacks are hijacking AI browser agents through malicious extensions using a technique called Prompt Forcing (bleepingcomputer.com).
8. Google Gemini accidentally breached real company systems during a security evaluation conducted by an external partner (thehackernews.com).
9. CrowdSec reported that a supply chain attack on TanStack led to the theft of credentials and unauthorized access to 170 private GitHub repositories (thehackernews.com).
10. The Gyazo server was compromised leading to the theft of 23.6 million user records (reddit.com).
11. A supply chain attack on Brevo affected over 100000 websites through a compromised Cloudflare API key (reddit.com).
12. iTorrents.org was compromised to distribute Windows malware to visitors (reddit.com).
Be First to Comment