AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Security researchers at The Hacker News report a WordPress backdoor that re-establishes itself after removal by drawing on three separate persistence mechanisms: malicious files, database entries, and shared memory. Because each component can restore the others, standard cleanup that removes only one vector leaves the infection active. The technique raises the bar for incident response on compromised WordPress sites, which power a large share of the web.
The U.S. Cybersecurity and Infrastructure Security Agency kicked off its annual Cybersecurity Awareness Month, this year framed around the theme "Securing the Next 250." The campaign urges individuals and organizations to adopt basic security practices such as strong passwords, phishing vigilance, software updates and multi-factor authentication. It is a routine public-awareness push rather than a response to a specific incident, but it reflects ongoing government efforts to shore up U.S. cyber resilience.
The Hacker News published an advisory-style piece on how financial services companies can update and secure their software supply chains. It outlines risks such as third-party dependencies and outdated build pipelines, and suggests practices for hardening them. The article is guidance rather than reporting on a specific incident or development.
Security technologist Bruce Schneier argues that internet-connected vehicles collect and transmit extensive data on drivers and passengers, effectively turning cars into surveillance devices. He highlights automakers' broad data-sharing practices and weak privacy protections as the core problem. The piece matters because it frames vehicle data collection as a systemic privacy issue affecting millions of drivers worldwide.
OpenAI says it shut down a campaign that extracted reasoning data from its models, with investigators linking the activity to individuals associated with Chinese AI startup Moonshot AI. The incident underscores rising tensions over model distillation and intellectual property as rivals race to close the gap with leading AI systems.
The U.S. Cybersecurity and Infrastructure Security Agency added an authentication bypass vulnerability in Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities catalog, confirming attackers are abusing it in the wild. The flaw lets remote attackers gain unauthorized access to affected management systems, putting enterprise and government networks that rely on Cisco SD-WAN at risk. Federal agencies must patch by CISA's deadline, and private organizations are urged to do the same.
A proof-of-concept exploit for an Apple CoreGraphics vulnerability has surfaced publicly, while WhatsApp's PDF scanning behavior hints at how such a flaw might be delivered to targets. The link is unconfirmed, but it points to a possible chain where a malicious PDF could trigger memory corruption on Apple devices. Users should keep iOS, macOS, and WhatsApp updated while researchers verify the claim.
Cryptocurrency exchange Bitget has confirmed that a previously unknown zero-day vulnerability in third-party software was exploited to steal roughly $387.5 million in digital assets. The disclosure points to a supply-chain style attack rather than a flaw in Bitget's own core systems, though the exchange has not named the affected vendor. The theft ranks among the largest crypto heists of the year and renews concerns about how exposed trading platforms are to vulnerabilities in the software they rely on.
A security incident involving MetaMask, the widely used Ethereum wallet, has prompted affected Ethereum validators to shut down and exit the network. The event raises concerns about the security of validator infrastructure tied to popular wallet software. It matters because Ethereum validators help secure the blockchain, and their exit could impact network stability and user trust in crypto tooling.