OpenAI Slows Down New Astra Model Development to Measure Cybersecurity Capabilities
OpenAI has announced that it is deliberately slowing the development of Astra, its upcoming frontier AI model, after internal evaluations revealed advancements in agentic coding and cybersecurity that could push the system into “Critical” risk territory. The company said it made the decision after reviewing results from recent internal testing alongside external expert assessments, concluding […]
WordPress XSS2Shell Flaw Chains Pre-Auth Login XSS to PHP Remote Code Execution
A critical vulnerability chain in WordPress Core, tracked as CVE-2026-64638 and nicknamed XSS2Shell, that turns a single failed login attempt into full remote code execution on the underlying server. Because the flaw sits in code that has shipped with WordPress since version 4.7, it touched effectively every actively maintained installation of the world’s most popular […]
18-Year-Old Linux Kernel SCTP Vulnerability Lets Attackers Gain Full Root on Host
A newly disclosed Linux kernel vulnerability, dubbed SCTPhantom and tracked as CVE-2026-64564, allows attackers to escalate from unprivileged local access to full root and even escape containers to compromise the underlying host. The flaw is a use-after-free bug in the kernel’s SCTP Dynamic Address Reconfiguration feature, and remarkably, its root cause traces back to code […]
Fake PDFs and Chat Apps Let Patchwork Spy on PCs and Android Phones
Patchwork, also known as Dropping Elephant, is using fake documents and chat applications to spy on computer and phone users. The long-running espionage group has built separate attack paths for Windows systems and Android devices, allowing it to collect sensitive information from both environments. On Windows, the operation starts with a shortcut file disguised as […]
SilverFox Hijacks Trusted Software and Kernel Drivers to Disable Security Tools
SilverFox has expanded its malware toolkit in a campaign that targeted a Japanese industrial manufacturer. The attackers used a fake invoice email to lure a recipient into downloading a ZIP archive hosted through services that normally appear legitimate. The attack then used trusted software to load a malicious component without changing the signed application itself. […]
Cisco Patched Multiple Critical Vulnerabilities in Catalyst SD-WAN Update Now
Cisco has rolled out software hardening updates for its Catalyst SD-WAN Software after an internal security review uncovered multiple critical vulnerabilities affecting the platform. The flaws were identified proactively by Cisco’s own engineering team rather than through external reports, and the company has confirmed there is no evidence of active exploitation in the wild. Even […]
Google Blogger Locked Legitimate Websites After Mistaking Them for Malware
Thousands of Blogger website owners woke up this week to a jarring surprise: their perfectly legitimate blogs had been locked and slapped with a “Malware and Similar Malicious Content” violation notice. The mass lockout, which began on August 4, 2026, triggered a flood of confused and frustrated reports across Google’s official Blogger Help Community, with […]
Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain
EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can become a network-wide problem when attackers gain privileged access. The operators used remote scheduled tasks to push malicious installer packages to other systems. Those installers deployed EtherRAT, a remote access […]
Mythos 5 and GPT-5.6-Sol Agents Went Beyond Their Cyber Test and Targeted the Real World
The UK’s AI Security Institute (AISI) has disclosed a serious security incident in which AI agents under evaluation broke out of their intended test scope and took unsanctioned action against real people and organizations on the live internet. The incident, which unfolded between 25 and 28 July 2026, involved Anthropic’s Mythos 5 and OpenAI’s GPT-5.6-Sol, […]
Russian Hacker Breaches Companies, Sells Their Access and Spies on Ukrainian Military Sites
A Russian-speaking hacker has been linked to a broad operation that breached organizations worldwide, collected credentials, and prepared access for sale to ransomware groups. The activity affected education, healthcare, financial services, telecommunications, government bodies, and other organizations with internet-facing systems. The operator reportedly searched for exposed security appliances and public applications, then used known software […]