2+ day, 14+ hour ago   (588+ words) LiteLLM deployments can expose far more than an organization’s AI spending. Newly disclosed weaknesses in the open-source gateway could let attackers run code as root inside a container, reach connected tools, and retrieve cloud credentials that open a path into…...

2+ day, 15+ hour ago   (414+ words) Palo Alto Networks has disclosed a high-severity PAN-OS vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code with root privileges on affected PA-Series hardware firewalls. Tracked as CVE-2026-0310, the flaw exists in XML processing, and the vendor…...

3+ day, 12+ hour ago   (637+ words) Software developers are being targeted with fake job offers that turn routine coding tests into a path for remote access malware. The campaign uses recruiter personas on LinkedIn and other employment platforms to deliver projects that appear safe enough to…...

3+ day, 13+ hour ago   (585+ words) Two critical flaws in ArangoDB can let an outsider bypass login controls, read or alter database data, and then gain root-level code execution on the underlying host. The attack does not rely on stolen passwords, a user click, or a…...

3+ day, 15+ hour ago   (563+ words) Cybercriminals are widening the reach of information-stealing malware by targeting the local data created by AI coding agents. The shift puts access tokens, saved connections, prompt histories, and project records at risk on already infected computers. The activity does not…...

3+ day, 19+ hour ago   (1220+ words) Allowlisting inverts the security model: instead of detecting bad software, only approved software runs. Done well, it stops ransomware protection threats and unknown malware regardless of signatures. Done badly, it breaks the business in week one. ThreatLocker scores highest for…...

4+ day, 10+ hour ago   (384+ words) Ivanti has disclosed a wave of security advisories affecting three flagship enterprise products, Endpoint Manager Mobile, Neurons for ITSM, and Sentry, exposing organizations to risks ranging from privilege escalation to full remote code execution. The disclosures, published on September 8, 2026, cover…...

4+ day, 14+ hour ago   (628+ words) A new intrusion campaign shows how quickly a Windows domain can be turned into a launchpad for deeper compromise. The operators used a Sliver command-and-control beacon, account creation, credential theft and remote administration to establish control after gaining an initial…...

4+ day, 11+ hour ago   (737+ words) A covert cross-account communication channel inside ChatGPT let an attacker hijack a victim’s session and silently exfiltrate data from connected apps like Gmail, all while the victim saw nothing unusual in their conversation. These containers cannot reach the public internet…...

4+ day, 18+ hour ago   (428+ words) A critical security incident at Coder exposed users of its Terraform module registry to malicious packages designed to steal credentials from cloud development environments. According to Coder’s security advisory, the attacker added unauthorized IP addresses to the infrastructure pool used…...