Summary: GitLab has released urgent patches for a series of vulnerabilities, including CVE-2025-3950, which allow unauthorized users to trigger CI/CD […]
GitLab “Pipeline Execution” Flaws (CVE-2025-3950) Threaten CI/CD Integrity Read More »
Summary: South Korean telecom giant SK Telecom is legally challenging a record-breaking $91 million fine imposed by the Personal Information
Regulatory Shock: SK Telecom Challenges Record $91M Data Breach Fine Read More »
Summary: Check Point Research has uncovered “VoidLink,” a sophisticated Linux malware framework believed to be developed almost entirely by a
VoidLink: First “AI-Architected” Linux Malware Framework Discovered Read More »
Summary: Researchers have identified a new supply chain attack vector dubbed “Slopsquatting.” Attackers are registering package names on npm and
New Attack Vector: “Slopsquatting” Exploits AI Hallucinated Packages Read More »
Summary: A critical vulnerability (CVE-2026-1022) in a widely used Jenkins artifact management plugin is being exploited to replace legitimate software
Jenkins “ArtifactJack” Attack: CI/CD Pipelines Hijacked via Plugin Flaw Read More »
Summary: A hacking group has released “TotalRecall,” a tool that exploits a flaw in Microsoft’s “Recall” feature (which takes constant
Microsoft “Recall” Exploit: Tool Released to Decrypt History Remotely Read More »
Summary: The Central Bank of Bahrain (CBB) has released a new directive today holding financial institutions “strictly liable” for financial
Bahrain CBB Issues “AI Liability” Framework for Financial Institutions Read More »
Summary: Security researchers have discovered that several popular “distilled” versions of the DeepSeek-V3 coding model, hosted on public repositories, contain
DeepSeek-V3 “Poisoned Weights” Alert: Malicious Distillations Infecting DevOps Tools Read More »
Summary: Security researchers have detailed “BodySnatcher,” a new vulnerability affecting “Agentic AI” systems (AI that can perform actions autonomously). By
Agentic AI Hijacking: “BodySnatcher” Vulnerability Hits Autonomous Agents Read More »
Summary: A new variant of the “ClickFix” social engineering tactic, dubbed “CrashFix,” has emerged. It uses a malicious Chrome extension
Alert: “CrashFix” Chrome Extension Uses Malicious Loops to Lure Victims Read More »
