Security researchers disclosed Carbonato botnet malware that uses Hermes Agent AI framework to autonomously compromise exposed Docker daemon hosts.
Security researcher disclosed that GitLab’s issue email addresses act as credentials, allowing unauthorized code pushes and CI/CD job triggering if
ShinyHunters claims breach of FBI employee and applicant data in dark web post on September 23, stating the attack is
CVE-2026-93952 (CVSS 10.0) in on-premises VeloCloud Orchestrator under active exploit. Unauthenticated attackers access privileged internal functions.
Security researchers broke out of OpenAI’s Codex sandbox using two methods and chained vulnerabilities to compromise ChatGPT and Codex staff
ShinyHunters extortion gang claims theft of over 200,000 driver records from Florida DMV’s DAVID online platform. No official confirmation yet
Grindr will pay £26 million to settle UK lawsuit over sharing users’ HIV status and sensitive personal data with third
Hackers who stole nearly 4,000 bitcoin from Liquid Network returned 3,400 BTC but kept 598.5 bitcoin worth $47 million. Network
LG faces allegations of egregious privacy invasion over smart TV data collection practices, following earlier scrutiny over monitors installing adware.
EU Cyber Resilience Act enforcement begins Sept 11, requiring software vendors to report actively exploited vulnerabilities within 24 hours of
Subscribe to the Daily Security Review Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.