Summary: A new Denial-of-Service (DoS) vulnerability has been discovered in the Kubernetes API server. By submitting a specially crafted YAML […]
Critical Kubernetes “Billion Laughs” Flaw (CVE-2026-0032) Crashes Clusters Read More »
Summary: The European AI Office has issued its first major penalty under the EU AI Act, fining a multinational recruitment
EU AI Act Enforcement: First Major Fine for “Emotion Recognition” in Hiring Read More »
Summary: Researchers have detailed “RAG-Jacking,” a technique where attackers compromise a low-security document (like a shared cafeteria menu or internal
New Attack Vector: “RAG-Jacking” Poisons Enterprise AI Knowledge Bases Read More »
Summary: The Bahrain National Cyber Security Centre (NCSC) has warned of a renewed campaign by the APT34 (OilRig) group targeting
Bahrain NCSC Alert: “OilRig” Group Resurfaces with “DrillBit” Malware Read More »
Summary: Broadcom has issued an emergency patch for a critical Remote Code Execution (RCE) vulnerability in VMware vCenter Server (CVE-2026-1009).
Critical VMware vCenter RCE (CVE-2026-1009): “VirtualEscape” Exploit Read More »
Summary: GitLab has released urgent patches for a series of vulnerabilities, including CVE-2025-3950, which allow unauthorized users to trigger CI/CD
GitLab “Pipeline Execution” Flaws (CVE-2025-3950) Threaten CI/CD Integrity Read More »
Summary: South Korean telecom giant SK Telecom is legally challenging a record-breaking $91 million fine imposed by the Personal Information
Regulatory Shock: SK Telecom Challenges Record $91M Data Breach Fine Read More »
Summary: Check Point Research has uncovered “VoidLink,” a sophisticated Linux malware framework believed to be developed almost entirely by a
VoidLink: First “AI-Architected” Linux Malware Framework Discovered Read More »
Summary: Researchers have identified a new supply chain attack vector dubbed “Slopsquatting.” Attackers are registering package names on npm and
New Attack Vector: “Slopsquatting” Exploits AI Hallucinated Packages Read More »
Summary: A critical vulnerability (CVE-2026-1022) in a widely used Jenkins artifact management plugin is being exploited to replace legitimate software
Jenkins “ArtifactJack” Attack: CI/CD Pipelines Hijacked via Plugin Flaw Read More »
