Cybersecurity
357 articles RSS
Security Researcher Publishes Windows Defender 'ShieldBreak' Zero-Day, Says Microsoft Threatened Legal Action
A researcher known as Nightmare Eclipse disclosed an unpatched Windows Defender privilege-escalation flaw, saying Microsoft's legal threats left public disclosure as the only option.
Mozilla Rotates Firefox and Thunderbird GPG Signing Key After Accidental GitHub Exposure
Mozilla revoked and replaced a GPG signing subkey after an unencrypted copy leaked into a private GitHub repo, finding no evidence of unauthorized use.
Varonis Discloses RovoBlast, a One-Click Prompt Injection Flaw in Atlassian's Rovo AI Assistant
A crafted link could seed attacker instructions into a user's Rovo session, letting the assistant's browsing agent exfiltrate Jira and Confluence data.
Novee Security Finds Zero-Privilege Flaws in Claude Code, Gemini CLI, and Codex Around Black Hat USA 2026
Researcher Elad Meged showed a privilege-less GitHub issue could reach CI secrets in Claude Code, Gemini CLI, and Codex; two flaws got CVEs, one didn't.
Unpatched GeoServer Zero-Day Sees Active Exploitation Within Hours of Public Disclosure
An unpatched SQL injection flaw in GeoServer's jsonArrayContains function is already being probed by attackers, watchTowr says, with no CVE or fix yet available.
Lazarus Group Exploited Windows Kernel Zero-Day via Fake Job Offers Before Microsoft's August Patch Tuesday Fix
Check Point traced CVE-2026-68820, a WinSock kernel flaw, to a North Korean campaign deploying the FudModule rootkit against defense contractors before Microsoft patched it.
OpenAI Open-Sources Codex Security CLI, Leaving the Scanner Behind a Gate
OpenAI released the command-line tool and SDK for Codex Security, formerly Aardvark, under Apache-2.0, while the underlying scanner stays limited-beta.
OpenSSH 10.5 Fixes ssh-agent Locking Bypass and Two Other Flaws, Citing AI-Assisted Bug Reports for a Faster Release Cadence
OpenSSH 10.5 patches a locking bypass in ssh-agent and two other flaws, and the project says a surge in AI-assisted vulnerability reports is pushing it toward faster, on-demand security releases.
Six npm Packages Compromised to Pull Malware Command-and-Control Addresses From Ethereum Transactions
Sonatype found six npm packages that decode malware C2 server IPs from Ethereum transaction bytes, using a technique tied to North Korea's Contagious Interview campaign.
Microsoft Expands Bug Bounty Program to Open Source and Third-Party Code, Pays Record $20 Million
Microsoft's bounty program paid over $20 million to 562 researchers this year after expanding scope to cover open-source software and third-party components.
Malicious 'Solidity Pro' VS Code Extensions Steal Crypto Wallets and Developer Credentials via Telegram Exfiltration
Yeeth Security found 'Solidity Pro' VS Code extensions that evolved from a delayed Cloudflare-Worker dropper into a Telegram-based wallet and credential stealer targeting web3 developers.
GitHub Ships an Actions Network Firewall in Technical Preview, Consolidates Months of npm and Actions Supply Chain Hardening
GitHub detailed a technical-preview Actions network firewall and rounded up npm and Actions defaults changed since February, drawing sharp Hacker News debate over delay-based defenses versus package signing.