3+ day, 22+ hour ago   (296+ words) In the letter to Lutnick, the three lawmakers characterized the firms' conduct as a coordinated, decade-and-a-half-long attack on the American legal and financial system. Their specific allegations include: The request in the lawmakers' September 9 letter would mark the first application…...

4+ day, 4+ hour ago   (487+ words) Tencent has since deployed patches and server-side mitigations that block the specific exploit for all users. No exploitation in the wild has been reported. The attack's simplicity is what makes it alarming. An attacker needed only a WeChat account on…...

4+ day, 4+ hour ago   (334+ words) OpenAI did not directly answer questions about how many sites were involved or why the activity remained undisclosed for months. Writing in a policy essay titled "The AI policy window is open. We need to act," Lehane argued that the…...

4+ day, 21+ hour ago   (605+ words) The Exchange Server situation warrants front-of-queue treatment over the two named zero-days. CVE-2026-55007 allows a remote, unauthenticated attacker to execute code on an affected Exchange server by sending an email containing a malicious Visio attachment. The code runs when the…...

6+ day, 1+ hour ago   (619+ words) The incident is the largest publicly disclosed Bitcoin sidechain security breach on record: approximately 3,996 BTC, worth roughly $316 million, drained from the Liquid Federation's reserve wallet in a single transaction, recovered in part within about 26 hours through an entirely on-chain negotiation....

6+ day, 1+ hour ago   (572+ words) StyleSmuggler is a two-stage server-side template injection attack (CWE-1336) that exploits Magento's template rendering engine through a specific input property called styles. Server-side template injection is a class of vulnerability in which user-supplied input triggers remote code execution — a distinction…...

6+ day, 13+ hour ago   (394+ words) This is not a design flaw in HAProxy. The filter API is working as intended. The exploitation is the binary replacement itself: an attacker who can install a recompiled version of a trusted application inherits all of that application's privileges…...

1+ week, 2+ day ago   (298+ words) The agents were running multi-round timed web-lookup tasks — information-retrieval exercises structured as five sequential questions, with a generous first window and extremely short answer deadlines (sometimes 13 seconds) for the rounds that followed. Their environment gave them read access to the…...

1+ week, 2+ day ago   (613+ words) The vulnerability targets a specific Falcon capability: the automatic removal of malicious macros from Microsoft Office files. That Falcon macro removal feature is a core part of Falcon's active protection suite and runs as a Windows service with SYSTEM-level privileges…...

1+ week, 2+ day ago   (363+ words) That is the situation as of September 4, 2026: OpenAI has committed to building a kill switch. It has not built one yet. And Congress, which asked for the evidence to audit OpenAI's safety practices, is still waiting. Rep. Casar called the…...