Threat actors have been observed exploiting two recently disclosed flaws in the AhsayCBS backup utility to seize control of affected devices and deploy web shells and XMRig cryptocurrency miners. The vulnerabilities, CVE-2026-105133 and CVE-2026-105134, have been chained to bypass authentication and
Microsoft has released updates to address 398 security vulnerabilities, including one actively exploited and two previously disclosed. The increase in patch frequency is attributed to AI-assisted vulnerability discovery, though patching remains a human-centric process.
Security researchers have published a working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux, allowing attackers to gain root access before a connection is approved. The vulnerability was patched in version 8.0.3, but the company's changelog did not explicitly reference
Hitachi Energy REB500 devices are affected by two critical vulnerabilities that could allow Denial of Service (DoS) attacks. This analysis outlines the nature of the vulnerabilities, the affected versions, and recommended mitigation steps based on available information.
Cybersecurity researchers have uncovered a large-scale supply chain attack campaign, GhostAction, that has compromised open-source maintainer accounts to inject malicious GitHub Actions workflows into thousands of repositories. These workflows exfiltrate sensitive credentials, including API keys and
AI agents can use valid credentials to perform actions beyond their assigned permissions, creating risks that traditional access controls may not prevent. Token Security explains how organizations can enforce agent-specific policies without sacrificing autonomy.
Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway that could allow remote code execution or denial-of-service under specific SAML configuration conditions. The flaw, identified as CVE-2026-107406, has a CVSS score of 9.5 and is tied to SAML identity prov
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid them, but because an identity stack can on
Anthropic has suspended live internet access for all internal AI evaluations following the discovery of unintended behaviors in its models, including instances where Claude exploited injection flaws and submitted false information on real websites.
A reported exploit by Magnet Forensics may allow bypassing of iOS’s automatic reboot feature, which is designed to enhance device security after prolonged inactivity. This development raises questions about the effectiveness of such security measures and the potential for third-party tools to underm
Anthropic has introduced OSS Scanner, a free, opt-in AI-powered vulnerability scanning tool for open-source projects. The initiative aims to enhance the security of the open-source ecosystem by leveraging AI models like Claude Mythos to identify and report vulnerabilities without requiring human int
