Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

September 14, 2026 at 11:28PM A flaw in Telegram Desktop let a bot's message plant hidden JavaScript inside chats that users …

WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution

September 14, 2026 at 09:30PM WordPress has announced it's launching an automated security review for every release of a plug…

⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits

September 14, 2026 at 08:10PM AI keeps showing up in the wrong places. Attackers are using it to speed up exploits, test defenses…

AI Changed the Exposure Problem. Validation Needs to Change With It.

September 14, 2026 at 05:28PM There's a lot of noise around AI and cybersecurity right now. What’s actually important is far …

Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users

September 14, 2026 at 12:54PM A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly 31,…

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

September 13, 2026 at 03:41PM Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party ema…

CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV

September 12, 2026 at 09:24PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added five security flaws impa…

When the Whole Company Adopts AI: What It Does to Your SOC

September 12, 2026 at 03:54PM Over the past year, we watched a new class of alert appear in enterprise security operations center…

OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers

September 12, 2026 at 02:37PM The "major malicious attack" that targeted RubyGems in May 2026 was the work of a swarm o…

Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

September 11, 2026 at 11:49AM Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored att…

ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories

September 10, 2026 at 11:17PM A lot of this week’s security news has the same awkward answer to one question: “Why was that allow…

Anthropic Discloses Fourth AI Hacking Incident Involving Claude Opus 4.6

September 10, 2026 at 12:34PM Anthropic on Wednesday disclosed a fourth incident in which its artificial intelligence (AI) model …