Microsoft on Monday confirmed that it temporarily removed some GitHub repositories in response to a recent security incident that led to 73 of its open-source projects being compromised to inject an information stealer into the code. “Our priority is to protect customers and the broader ecosystem,” a Microsoft spokesperson toldRead More »Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

Oxford University disclosed it experienced a data security incident. 

Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, almost a year after patches for the vulnerability were released. The activity has been attributed by Trend Micro to Earth Dahu (aka Gamaredon) and SHADOW-EARTH-066 (aka UAC-0226). It involves the exploitation ofRead More »WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it encounters, and replicate itself, all without human intervention and without touching a commercialRead More »Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-11645 (CVSS score: 8.8), has been described as an out-of-bounds memory access in V8, Chrome’s JavaScript and WebAssembly engine. “Out-of-bounds read and write in V8Read More »Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild – Patch Now