Cybersecurity researchers have discovered a NuGet typosquat that’s unlike the typical information-stealing malware distributed via package registries: usual info-stealers: it’s designed to rig live game results on Digitain. The package, named “Newtonsoftt.Json.Net,” masquerades as the Newtonsoft.Json library and is a trojanized fork. Seven versions of the package have been publishedRead More »Trojanized Newtonsoft.Json Fork Hides Game-Rigging Code in a Working Library

Researchers have discovered a new development with the agentic threat actor JADEPUFFER. 

A single invisible comment in an Azure DevOps pull request can turn a reviewer’s own AI coding agent against them, driving it into projects the attacker has no rights to reach and quietly leaking what it finds. The flaw is in Microsoft’s official Azure DevOps MCP server, and it worksRead More »Microsoft Azure DevOps MCP Flaw Lets Hidden PR Comments Hijack AI Review Agents

OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol and an “even more capable pre-release model,” was behind the security incident that targeted Hugging Face’s production infrastructure last week. The AI company said the models were operating with “reduced cyber refusals for evaluation purposes”Read More »OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

The home appliance giant LG Electronics USA said this week it plans to suspend any apps built for its smart TVs that turn one’s television into an always-on residential proxy node. The move comes less than a month after researchers found that more than 42 percent of games and otherRead More »LG to Ban Residential Proxies from Smart TV Apps

Apple has moved to address a security flaw in its Hide My Email service that enabled users’ real email addresses to be unmasked, effectively undermining the feature’s privacy guarantees. 404 Media reported Tuesday that a fix for the issue was deployed by Apple on July 3, 2026, after more thanRead More »Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Hidden text on a web page was enough to make Kiro, AWS’s agentic coding IDE, rewrite its own configuration file and run an attacker’s code on a developer’s machine, with no approval step able to stop it. Intezer, in research with Kodem Security, found that a request as ordinary asRead More »AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code

Google’s DeepMind on Tuesday announced the release of Gemini 3.5 Flash Cyber, a specialized artificial intelligence (AI) model built atop 3.5 Flash that’s designed to discover, validate, and patch vulnerabilities quickly and efficiently. According to the tech giant, the model will be exclusively available to governments and trusted partners viaRead More »Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities