AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Attackers are targeting a vulnerability in Rejetto HTTP File Server (HFS) that enables admin session forgery and remote code execution. The flaw could let attackers bypass authentication and run malicious code on vulnerable servers. Users and organizations running HFS should patch promptly and monitor for signs of compromise.
Google has temporarily frozen its open source bug bounty program, saying AI-generated submissions have risen sharply and are burying real vulnerabilities in noise. The program paid researchers for finding flaws in critical open source software. The pause highlights how AI tools are straining the security disclosure pipeline and could slow fixes for widely used code.
An alleged member of the ShinyHunters hacking group, identified as Rey, has reportedly been detained in Jordan and is helping the FBI identify other members of the crew. ShinyHunters has been tied to numerous large-scale data breaches affecting major companies and millions of users, so a cooperating insider could expose the group's network and leadership.
Britain's domestic intelligence service MI5 has alleged that China's Ministry of State Security funded research involving more than 100 academics with links to the United Kingdom. The claim suggests Beijing used academic partnerships as a channel for state intelligence activity. It raises fresh concerns about foreign interference in UK universities and could sharpen scrutiny of UK-China research collaborations.
The Hacker News published a forward-looking analysis of the cybersecurity landscape heading into 2026, breaking down major market segments, industry insights and emerging technologies. It surveys where security spending and innovation are heading rather than reporting a single incident. Useful context for security professionals, but it is an overview piece with no immediate operational impact.
The European Union is reportedly working to fight unregulated squid fishing, as highlighted by Schneier on Security. The issue matters because unregulated squid harvesting can threaten ocean ecosystems and sustainable fisheries.
Apple plans to restrict how much of a Mac's disk apps and AI agents can read, citing what it calls a substantial rise in risk from autonomous AI tools. The change would mark a significant tightening of macOS permissions, affecting developers and users who rely on broad file access. It reflects growing industry concern that AI agents, which can act on a user's behalf, could abuse wide-ranging system access if compromised or misdirected.
GitLab has released fixes for a maximum-severity vulnerability (CVSS 9.9) in its AI Gateway that allows attackers to run commands on self-hosted servers. The flaw affects organizations running their own GitLab instances, where exploitation could lead to full server compromise and data theft. Administrators are urged to apply the patch promptly, as self-hosted GitLab servers are frequently targeted by attackers.
A newly identified backdoor called Antino is being used in a China-linked espionage campaign, hiding its command-and-control traffic inside legitimate Microsoft Outlook and OneDrive services. By blending malicious communications with everyday cloud activity, attackers make the intrusion far harder for defenders to detect.