Four Linux Kernel Flaws Now Ship With Public Root Exploits
Public Linux kernel root exploits just reset your patch clock. Shrink local-to-root cybersecurity risk on the hosts you already log into.
Private GitHub Is a Loud Command Channel
Private GitHub is live C2, and the AI-escape story is cover. See what this week's cybersecurity failures mean for your repos.
QUERY Is Standard. Your Method Allowlist Isn’t
RFC 10008 made QUERY a real HTTP method. Most cybersecurity stacks still parse like it's 2010. Check your verb allowlists.
Root Owns the Box Writing Policy
Unauthenticated root on the policy server is a cybersecurity hole behind your firewall. Audit the management plane today.
CISA Cut Weekly Vuln Roundups. FBI Boarded Two Tankers
CISA killed weekly vuln roundups as FBI boarded two tankers. Score real cybersecurity exposure, then cut it. See what to change this week.
Your Failover Died With the Region
AWS wrote off Bahrain and UAE data after the strikes. If your cybersecurity plan assumed the region would return, check the copies.
Crafted Packets Bypass ISE Auth Before Your Firewall Logs
Cisco ISE is taking unauthenticated crafted requests in the wild. Your cybersecurity stack still trusts that box. See what to cut first.
A Judge Now Owns the People-Search Empire
Radaris lost its domains in court. The dossiers didn't. See what your cybersecurity team should freeze this week.
The Agent Already Took the Data
Spain filed an agentic data theft. Your cybersecurity stack still starts too late. Check the login trail.
Hijacked Session Spread Worms to 100 Repos
A hijacked AI coding session spread Shai-Hulud through 100 repos. See what cybersecurity teams should lock down before the next suggestion.
Unauthenticated File Upload Put PHP Shells on 6,000 Shops
Unauthenticated WooCommerce uploads dropped PHP shells on 6,000 shops. Your cybersecurity plugin inventory is the real control. Audit it today.
One Confirmed Leak. 7.5 Million Records.
CenterPoint confirmed a 7.5 million-record leak after the dump. Snapshot audits fail as cybersecurity proof. Check your export path today.
Teachers Forced Microsoft’s Classroom Privacy Deal
Teachers got Microsoft to lock school AI. Your tenant still trains on tickets. Read the cybersecurity cuts to make now.
MQTT Keepalives Hid Three Years of Access
BambooToken used MQTT keepalives as C2 for years. See how to treat brokers as command servers and cut dwell. Check your allows.
Your Mail Gateway Was Always a Root Host
Cisco's mail-gateway root RCE and LiteSpeed's tenant bug show cybersecurity still treats appliances as filters. Audit the box.
One Cask Bug. Root Across the Mac Fleet
Homebrew's unsigned cask sudo path and a one-click Tencent IME bug show cybersecurity gaps on helper software. Audit brew and IMEs now.
Your Confidential VM Believed the Old Write
DDRop starves DRAM writes and fools TDX and SEV. Your cybersecurity isolation pitch just met a circuit. Check the real threat model.
Google Killed Hover and You Still Train It
Google hid search URLs and cloud roles still lie in the logs. Treat cybersecurity as behavior, not labels. Fix the hunts this week.
Trusted Access Emptied the Customer Files
Stolen logins and a government-looking inbox beat cybersecurity theater for months. Check which customer sessions are still open.
Your Daily Brief Changed Nothing
Daily cybersecurity briefings won't shrink your edge. Turn Monday intel into blocks before scanners reuse it. Grab the ritual.
Five Centers. You Still Own Every Outage.
NSA's five mission centers will not shorten your outage. See what the cybersecurity reorg actually changes for intel, detection, and IR. Read the checklist.
Don’t Budget the Pause They Asked For
Amodei wants a cybersecurity pause. Attackers already rented the mail pipes. See what to harden before the swarm clock runs out.
Linux Rootkit on F5 BIG-IP APM Hid the Access Path
A Linux rootkit on F5 BIG-IP APM sat under standard cybersecurity monitoring. See how to contain the access path and rebuild TMOS.
One Kit Now Chains Chrome and Windows for Multiple Spies
BlueMoon now chains Chrome and Windows zero-days for multiple spies. See how cybersecurity teams hunt the shared kit. Check your detections.
CVE-2026-42016 Puts Artifact Authz on the KEV Clock
CISA put CVE-2026-42016 and four peers on the cybersecurity KEV clock. Authz bugs in your admin planes are exploited now. Check owners today.
