AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Forensic analysis confirmed that the iPhone of a Serbian university rector was infected with NSO Group's Pegasus spyware in the days leading up to the country's elections. The revelation raises alarms about surveillance of academics and civil society figures during a politically sensitive period. It adds to mounting evidence of Pegasus misuse in the Balkans and intensifies scrutiny of Serbia's intelligence services.
The Hacker News published guidance on how security teams can manage uncontrolled or “wild” code. The advice is aimed at helping organizations reduce risks from unvetted or poorly governed code.
The Go project released an emergency update that blocks eight certificate authority keys, citing undisclosed security concerns. The change affects Go's trusted certificate handling and could disrupt TLS connections relying on those keys. Users are advised to update promptly while details remain limited.
Russia-linked APT28 has breached a naval shipbuilder in a NATO country and deployed a new reflective loader, according to The Hacker News. The intrusion targets a defense-sector contractor, raising concerns about espionage and supply-chain risk for NATO navies. The new loader may help the group evade detection and deliver further payloads.
Security researcher Bruce Schneier flags reports of a possible new zero-day affecting Cellebrite's iPhone forensic unlocking tools, with the exploit apparently involving the device's radio or baseband component. If confirmed, it would mark another escalation in the cat-and-mouse game between forensic vendors and Apple's device security. The claim remains unverified and details are limited.
ConnectWise has reset credentials following a security incident, while its cloud backup service remains offline. The company provides remote monitoring and management tools widely used by managed service providers, so disruption could affect many downstream customers. The cause and scope of the incident have not been fully disclosed.
Attackers compromised five OVHcloud command-line interface releases and used them to distribute malware designed to steal secrets. The supply-chain incident could expose credentials and other sensitive data for developers and organizations using the affected CLI versions. Users should verify affected releases and rotate any potentially exposed secrets.
Attackers are using ClickFix tactics to exploit a flaw in Siemens Software Center and install a remote access trojan. The malware can give attackers remote control of compromised systems, posing risks to enterprise and industrial networks.
A former OpenAI engineer has been detained in a case involving alleged espionage devices, with reporting pointing to contacts involving a member of the Saudi royal family. The case raises concerns about insider access to advanced AI technology and foreign influence at leading US labs. Details of the charges and the nature of the royal contacts have not been fully disclosed.