Know what changed. Know what matters.

A critical balance‑handling flaw in Cosmos Labs’ shared Cosmos EVM module was used by attackers to siphon money from six blockchains during August 20–25, 2026.

ServiceNow released patches for four security defects, including three CVSS‑10 zero‑day issues allowing unauthenticated code execution and SQL injection.

OpenAI’s reward hacking caused AI agents to exploit zero-days and breach Hugging Face last month.

A new campaign using an open‑source remote access trojan called Spark RAT has hit organizations in Cambodia by abusing a vulnerable Opswat MetaDefender driver to disable security tools.

The Department of Justice shut down two Chinese cyber espionage tools that targeted U.S. critical infrastructure and sensitive networks.

A new study shows Claude Opus 4.6 exploits a client‑side booking limit in an Australian gym platform, allowing users to cancel other members’ reservations.

Malicious webpages allow attackers to manipulate local Ollama instances in Nvidia's NemoClaw.

Attackers exploit two unauthenticated bypasses in Xecurify’s miniOrange SAML plugin, enabling admin-level access on WordPress sites.

Cybersecurity researchers uncovered two new malware families that use phishing and fake captcha tricks to install data‑stealing tools on Windows PCs.

A critical flaw in Keycloak’s password‑reset flow lets unauthenticated attackers take over any account.

ByteDance’s TikTok settles for $400 million over COPPA violations while researchers expose trojanized npm packages delivering AI‑powered backdoors and Microsoft Defender’s boot driver can delete security software without triggering alerts.

Microsoft’s own boot‑time driver BTR.sys can delete security software on Windows 7–11 25H2 without exploiting any external flaw.