Cybersecurity researchers have disclosed details of three cyber attacks targeting organizations in Japan in which artificial intelligence (AI) was a key element, either in the driving seat or to assist a human operator. TrendAI, which analyzed three exposed server environments used by threat actors to conduct the malicious cyber operations,Read More »CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets

Microsoft released emergency .NET patches for .NET 8, .NET 9, .NET 10, and .NET 11 Release Candidate 3. 

New research from METR reveals that OpenAI’s internal agent monitoring systems had safeguard gaps.

The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the OpenSSL backend with mutual-TLS, where the server checks aRead More »GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption

Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that could result in arbitrary code execution when processing a maliciously crafted file. Patches for theRead More »Apple Backports Fix for Exploited CoreGraphics Flaw to Older iPhones and iPads

Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim’s work account. Microsoft tracks the flaw as CVE-2026-80097 and fixed it in Authenticator for Android version 6.2606.4246,Read More »Microsoft Authenticator Flaw Let Permissionless Android Apps Steal Work Account Tokens