AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
The Hacker News reports critical firewall vulnerabilities, rented banking trojans, weaponized PDFs, token theft, and 26 other security stories. The roundup highlights active threats that organizations should patch and defend against.
A critical vulnerability in the Linux kernel's TCP implementation, rated 9.8 out of 10 on the CVSS scale, affects Ubuntu, Red Hat and other major distributions. The flaw could allow attackers to compromise affected systems, prompting vendors to release patches. Administrators are urged to apply updates promptly given the severity and widespread use of the affected kernels.
Google's Gemini 4 Carbon reportedly leads benchmarks for finding, exploiting, and patching software vulnerabilities. The result matters because AI systems could speed up security testing and patching, while also lowering barriers to identifying and exploiting flaws.
A security flaw in Telegram’s Android app let attackers run malicious code when users answered voice calls. The issue affects a widely used messaging app with a large Android user base, posing a serious remote code execution risk. Users should install the latest Telegram update to stay protected.
Cisco has released patches for an actively exploited VPN vulnerability in its ASA and FTD software that can crash firewalls. The flaw affects widely deployed perimeter devices, creating denial-of-service risks for organizations. Administrators should apply fixes or mitigations promptly.
An attacker attempted to exploit Alpine Linux’s GitLab instance through a CVSS 10.0 vulnerability exposed by an unpatched Ruby component. The incident highlights the risk of critical flaws in open-source infrastructure and the need for timely patching.
China-linked hackers exploited a VMware ESX zero-day vulnerability to reduce the visibility of audit trails, according to The Hacker News. The flaw matters because ESX supports many enterprise virtualized environments, and weakened logging can hinder detection and incident response.
Researchers report that attackers are actively exploiting PHP2Shell vulnerabilities in Palo Alto Networks management interfaces that are reachable from the internet. Exposed appliances give adversaries a path to remote code execution and potential full compromise of perimeter firewalls. Organizations are urged to restrict management access and patch promptly, since internet-facing security devices are high-value targets for intrusion and lateral movement.
The China-linked espionage group Volt Typhoon operated a hidden relay network dubbed "Silent Train" to disguise its intrusions while exploiting four previously unknown zero-day vulnerabilities. The campaigns targeted victims while masking command-and-control traffic through the covert infrastructure. The findings matter because Volt Typhoon is tied to pre-positioning attacks against critical infrastructure, and the use of multiple zero-days signals a well-resourced, persistent threat.