News

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions

Source: AI News  ·  Published on 2026-09-24

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

Source: AI News  ·  Published on 2026-09-24

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

Placeholder third-party[.]com Referenced Across 1,700+ Repositories Now Serves Malicious Content

Source: AI News  ·  Published on 2026-09-24

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

Hacked Ukrainian Sites Serve Fake Cloudflare ClickFix Lures for Psychedelic Stealer

Source: AI News  ·  Published on 2026-09-24

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

Corp MDM Spyware Targets Logistics Firms, Steals New SMS and Redirects Calls

Source: AI News  ·  Published on 2026-09-24

Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore

Secrets Sprawl Is an Identity Problem That AI Just Made Impossible to Ignore

Source: AI News  ·  Published on 2026-09-24

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

17,000 URLs Reveal How ClickFix Turns Trusted Websites Into Malware Traps: Report by CTM360

Source: AI News  ·  Published on 2026-09-24

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

OpenAI Agent Bypassed Australian Medicare Portal Controls to Access Non-Public Files

Source: AI News  ·  Published on 2026-09-24

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

TeamFiltration Campaign Compromises Seven Microsoft 365 Accounts Using Default Passwords

Source: AI News  ·  Published on 2026-09-24

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

Source: AI News  ·  Published on 2026-09-24

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

Source: AI News  ·  Published on 2026-09-23

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

Source: AI News  ·  Published on 2026-09-23

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

MikroTrick Chain Let Attackers Take Over MikroTik Routers Without a Password or SSH Key

Source: AI News  ·  Published on 2026-09-23

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Source: AI News  ·  Published on 2026-09-23

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Source: AI News  ·  Published on 2026-09-23

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

New cPanel Flaw Lets a Hosting Account Run Code as Root, Take Full Server Control

Source: AI News  ·  Published on 2026-09-23

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent

Source: AI News  ·  Published on 2026-09-23

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Anthropic and OpenAI Models Still Attempt Restricted Actions in Safety Tests

Source: AI News  ·  Published on 2026-09-23

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Exploit Released for Unpatched Ubuntu Linux Flaw Enabling Host-Root Container Escape

Source: AI News  ·  Published on 2026-09-23

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers

Source: AI News  ·  Published on 2026-09-23

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

Source: AI News  ·  Published on 2026-09-23