AI reads 36 sources every 2 hours and ranks each story by importance from 1 to 5 - so you see what actually matters.
Security expert Bruce Schneier highlights that AI coding assistants are pulling in unknown or unverified code packages during development, which then gets deployed across corporate systems. This practice bypasses traditional software supply chain vetting, introducing potential vulnerabilities or malicious code. It matters because it creates a new, largely unchecked attack surface for enterprises relying on AI-generated code.
Attackers have launched over 440,000 exploit attempts against recently disclosed remote code execution vulnerabilities in two popular WordPress plugins, Super Forms and Elementor Pro. The flaws could allow authenticated users to inject malicious code, putting thousands of websites at risk. Site administrators should urgently apply available patches to prevent compromise.
Plex has released fixes for multiple undisclosed security vulnerabilities in its media server software. The company is strongly recommending users update promptly to protect their systems from potential exploits.
OpenAI's GPT-6 Astra reportedly achieved a perfect score on ExploitBench, a benchmark for autonomous vulnerability exploitation. In response, OpenAI has restricted requests for proof-of-concept exploit code to curb potential misuse. The move underscores the dual-use risks of advanced AI models in cybersecurity.
The Hacker News published its daily roundup of cybersecurity threats, headlining CEO phishing kit availability, roughly 5,000 hacked Dropbox accounts, and malicious OAuth application traps. The digest covers 20 stories in total, highlighting current attack trends and vulnerabilities that security teams should monitor.