AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Security expert Bruce Schneier's blog reports a new attack against RSA, a widely used public-key encryption algorithm. The finding could have broad implications for secure communications and digital signatures if it proves practical, though details and scope may still be developing.
Attackers linked to the threat group JADEPUFFER compromised Azure service principals and used them to delete cloud resources, according to The Hacker News. The incident highlights the risk of stolen credentials with high privileges in Microsoft Azure. It matters because service principals can have broad access, and deleting resources can disrupt operations or destroy data.
Citrix NetScaler has two unpatched remote code execution zero-day vulnerabilities under active exploitation, according to The Hacker News. Organizations using affected NetScaler systems should urgently apply mitigations, limit internet exposure, and monitor for signs of compromise because the flaws could enable full system takeover.
A malware campaign dubbed Lunex Stealer is abusing a vulnerable AMD graphics driver to disable security monitoring on infected Windows machines. Once defenses are down, the stealer harvests browser-stored passwords and other credentials. The technique matters because attackers are increasingly turning legitimate, signed drivers into tools for evading endpoint protection.
Attackers are exploiting a flaw in Oracle PeopleSoft while bypassing web application firewalls, according to The Hacker News. They are deploying web shells to gain persistent access to compromised systems. The issue matters because PeopleSoft is widely used for enterprise HR and finance, and WAF bypasses can undermine common defenses.
A security analysis argues that organizations cannot apply zero trust controls to AI agents until they first gain visibility into what those agents are doing. It highlights how agentic AI creates new blind spots that existing security tooling was not built to monitor. The piece is guidance for security teams planning AI governance rather than a report of a specific incident.
A cross-site request forgery vulnerability in the Elementor WordPress page builder can let attackers seize control of a site once a logged-in administrator clicks a specially crafted link. Exploitation requires no authentication beyond tricking an admin into a single click, making it a low-effort path to full site takeover. Site owners should update the plugin promptly, as Elementor is installed on millions of WordPress sites.
A serving U.S. Army soldier has been sentenced to nearly six years in federal prison after being convicted of extortion schemes targeting the telecom giants AT&T and Verizon. The case, reported by cybersecurity journalist Brian Krebs, highlights insider threats and abuse of access within the telecommunications sector. The sentence underscores how seriously U.S. courts are treating attacks on critical communications infrastructure.
The secure file-transfer vendor Kiteworks urged customers to take their servers offline after warning of an imminent and severe cyberattack. The company has not publicly detailed the vulnerability or who might be behind the threat. A shutdown of this kind disrupts file-sharing and data-transfer operations for affected organizations until systems are secured.