RCE flaws found in widely used AI Python libraries.
Researchers report bugs in Apple FlexTok, NVIDIA NeMo, and Salesforce Uni2TS that trigger when malicious model metadata is loaded.
These tools power popular AI models. Patches are out, no active exploitation seen yet.
Researchers report bugs in Apple FlexTok, NVIDIA NeMo, and Salesforce Uni2TS that trigger when malicious model metadata is loaded.
These tools power popular AI models. Patches are out, no active exploitation seen yet.
Spain’s court probe into the hacking of the prime minister’s phone with Pegasus spyware has collapsed after Government of Israel refused to cooperate.
By blocking judicial assistance, Israel effectively shielded NSO Group, whose Pegasus spyware has been used to target politicians, journalists, and activists worldwide
By blocking judicial assistance, Israel effectively shielded NSO Group, whose Pegasus spyware has been used to target politicians, journalists, and activists worldwide
TikTok updated its Privacy Policy and it goes far beyond basic app data.
The policy explicitly says TikTok may collect or infer sensitive personal data, including your:
Citizenship or immigration status
Religious beliefs
Mental and physical health information
Race or ethnic origin
Precise geolocation
Gender identity (including trans or non-binary)
Sexual orientation.
TikTok says this data can be provided directly, inferred from your activity, or processed “as permitted by law” and with user consent.
The policy explicitly says TikTok may collect or infer sensitive personal data, including your:
Citizenship or immigration status
Religious beliefs
Mental and physical health information
Race or ethnic origin
Precise geolocation
Gender identity (including trans or non-binary)
Sexual orientation.
TikTok says this data can be provided directly, inferred from your activity, or processed “as permitted by law” and with user consent.
Microsoft provided the FBI with keys to unlock encrypted user data
Microsoft said it receives around 20 requests for BitLocker keys a year and will provide them to law enforcement.
In Win 11, uploading your key to their cloud is activated by default for ‘convenience’.
Microsoft said it receives around 20 requests for BitLocker keys a year and will provide them to law enforcement.
In Win 11, uploading your key to their cloud is activated by default for ‘convenience’.
Osiris ransomware hit a major food service operator in Southeast Asia, researchers say.
The attack used a custom POORTRY driver to shut down security tools, then encrypted systems and exfiltrated data to cloud storage.
The attack used a custom POORTRY driver to shut down security tools, then encrypted systems and exfiltrated data to cloud storage.
Fake SymPy on PyPI is targeting Linux devs. The package sympy-dev clones the real project text, poses as a dev build, and has 1,100+ downloads since Jan 17.
It activates only when certain math functions run, then loads an XMRig miner fully in memory to avoid traces.
It activates only when certain math functions run, then loads an XMRig miner fully in memory to avoid traces.
One developer. 88,000+ lines of code.
Researchers say an advanced Linux malware framework was built in weeks with AI help, guided by a single skilled developer using an AI agent—resetting expectations for what one actor can build.
Researchers say an advanced Linux malware framework was built in weeks with AI help, guided by a single skilled developer using an AI agent—resetting expectations for what one actor can build.
An 11-year-old critical flaw in GNU InetUtils telnetd lets attackers log in as root with no password.
Tracked as CVE-2026-24061 (CVSS 9.8), it affects all versions 1.9.3–2.7 due to an unsanitized USER environment value passed to login.
Tracked as CVE-2026-24061 (CVSS 9.8), it affects all versions 1.9.3–2.7 due to an unsanitized USER environment value passed to login.
Cisco fixed an actively exploited zero-day in its voice and collaboration stack.
CVE-2026-20045 allows unauthenticated attackers to run commands and escalate to root on exposed Unified CM and Webex Calling systems.
CVE-2026-20045 allows unauthenticated attackers to run commands and escalate to root on exposed Unified CM and Webex Calling systems.
Tucker Carlson: “Pornography websites are controlled by Israeli intelligence agencies.
UK House of Lords votes in favor of banning VPNs for young people
They will only allow VPN use for those aged 18 and over.
They have also voted in favor of the UK social media ban for under-16s.
They will only allow VPN use for those aged 18 and over.
They have also voted in favor of the UK social media ban for under-16s.
CISA has added a critical vulnerability affecting Broadcom’s VMware vCenter Server to its Known Exploited Vulnerabilities (KEV) catalog.
This addition confirms that active exploitation of CVE-2024-37079 has been detected in the wild, posing a significant risk to enterprise environments that rely on vCenter for virtualization management.
Successful exploitation allows a malicious actor with network access to the vCenter Server to execute remote code, potentially gaining full control over the affected system.
This addition confirms that active exploitation of CVE-2024-37079 has been detected in the wild, posing a significant risk to enterprise environments that rely on vCenter for virtualization management.
Successful exploitation allows a malicious actor with network access to the vCenter Server to execute remote code, potentially gaining full control over the affected system.
New social media platform “Upscrolled” founded by Palestinian-Australian technologist Issam Hijazi has received thousands of downloads since Larry Ellison took control of TikTok.
BREAKING: EVERYONE IS MOVING TO UPSCROLL AFTER LARRY ELLISON TOOK OVER THE OTHER MEDIA.
North Korea’s Konni group is using AI-assisted PowerShell malware to target blockchain developers.
Campaigns hit Japan, Australia, and India via Google ad–style phishing links that bypass filters and drop EndRAT.
Campaigns hit Japan, Australia, and India via Google ad–style phishing links that bypass filters and drop EndRAT.
Russian users hit by a new phishing chain delivering Amnesia RAT and ransomware.
Fake business docs and LNK files do the work — no exploits. Payloads are split across GitHub and Dropbox, then Microsoft Defender is disabled using defendnot.
Fake business docs and LNK files do the work — no exploits. Payloads are split across GitHub and Dropbox, then Microsoft Defender is disabled using defendnot.
Poland blocked what officials described as its strongest cyberattack on the energy sector in years.
CISA confirms active exploitation of a critical VMware vCenter Server flaw.
CVE-2024-37079 allows remote code execution via a DCE/RPC heap overflow if an attacker has network access.
CVE-2024-37079 allows remote code execution via a DCE/RPC heap overflow if an attacker has network access.
Google Project Zero revealed a working zero-click exploit chain against Pixel 9 phones.
A bug in the Dolby audio decoder let Google Messages process a malicious audio file in the background, gaining code execution, then a kernel bug completed the takeover. Pixel patches shipped in early Jan 2026.
A bug in the Dolby audio decoder let Google Messages process a malicious audio file in the background, gaining code execution, then a kernel bug completed the takeover. Pixel patches shipped in early Jan 2026.