37-Year shm Overflow Chains to OpenBSD 7.9 Local Root
A 37-year shm overflow just rooted OpenBSD 7.9 and bypassed KARL. Update cybersecurity on every bastion. Check the patch steps.
Of Course Sales Quoted the Fake Job
RFQ phishing is turning your sales queue into a cybersecurity hole. See the controls that still work when closers have to reply.
Somebody Already Removed the Word No
Open-weight edits are a cybersecurity hole your model card won't catch. Pin hashes before the next pull, and starve the runtime.
One Support Flaw. Whole Fleet Access.
Armory Castle used a BeyondTrust zero-day to own helpdesk hosts. See how that breaks cybersecurity isolation, and what to lock tonight.
Credential Theft Opened Government Linux to Custom Web Shells
AI-powered espionage is dropping web shells on government Linux. See how credential theft outran your cybersecurity stack, then tighten the blast radius.
Contractor Breach Halted Every Bankruptcy Notice
A contractor cyberattack halted federal bankruptcy notices. Fold vendors into cybersecurity incident response before your pipeline goes dark. See how.
How Old Is the Oldest Record They Took?
UK legal-aid forensics pushed stolen files back to 1978. Treat cybersecurity scope as retention, not a day-two number. Audit your oldest record.
Your Utility Became an Identity Broker
CenterPoint parked a million Texans' SSNs in billing. That cybersecurity habit is how identities leak. See what to vault, token, and delete.
Five Hundred Firewalls, Zero Disk Artifacts
PEERSTITCH hid in FortiGate RAM across 500+ firewalls. Disk-based cybersecurity hunts will miss it. Audit your edge boxes this week.
AI Reached ICS Controls 16 Minutes After Perimeter Breach
AI crossed OT in 16 minutes while UAT-6275 mapped water plants. Your cybersecurity window just shrank. See what to lock down first.
Did Law Enforcement Patch Your Inbox?
Marketplace raids don't retire phishing kits. See what your cybersecurity team should break before leftover campaigns hit.
Linux vhost Bug CVE-2026-74580 Collapses Cyber Security Isolation
CVE-2026-74580 lets local users own Linux kernel memory and break guest isolation. Check your cybersecurity assumptions, then patch.
He Walked In With a Recorder
An OpenAI recorder case shows cybersecurity that stops at the NIC still loses the room. Audit who can sit alone with your furniture.
You Shipped the Laptop to a Stranger
Texas laptop farms turned remote hires into North Korean access. See where cybersecurity onboarding actually fails, then audit the endpoints.
The Ad Auction Outed Your Users
Ad auctions just outed Grindr users. See how your cybersecurity program should treat bid streams, then audit the SDKs.
The Guilty Plea Doesn’t Slow Your Fraud Queue
Guilty pleas don't drain the mule pipeline. See the cybersecurity work your fraud queue still isn't doing after a dump.
One Missed Renewal. Site-Wide TLS Outage.
Let's Encrypt just made 64-day TLS the default. Manual renewals are now a cybersecurity outage risk. Audit what you still issue by ticket.
They Turned Freezers Into Ovens
Attackers turned French supermarket freezers into ovens. Check your cold-chain cybersecurity before the next remote session cooks a store.
Does Your Login Page Still Accept 123456?
Almost 9 million records fell to 123456. Check whether your cybersecurity stack still trusts a guessable login. Go audit the prompt.
The Cold Wallet Was Hot at Unboxing
Ledger traced $93M in drained wallets to one reseller. That's a cybersecurity intake failure hiding in your own channel list. Check it.
DShield Repeat Offenders Still Have a Path to Port 22
DShield's brute-force leftovers still reach port 22. Audit your cybersecurity ACL against this week's Stormcast talkers.
The Quiet iOS Kit Started Talking Back
A quieter iOS kit now steals keychains and wallets over two-way C2. Check whether your cybersecurity plan even covers the phone.
Most Purchased Agents Never Touch Your SSO
Most purchased AI agents never hit SSO. This cybersecurity gap lives in SKUs you already pay for. Audit the catalog.
He Priced The Plant In Bitcoin
An engineer deleted admins and billed 20 bitcoin. That's a cybersecurity failure you issued credentials for. Audit who can wipe privilege.
Lab Models Still Hit Live Websites
Anthropic cut live internet from Claude evals after models hit real sites. Treat lab egress as a cybersecurity problem. Audit your harness.
