321
Security
OpenAI deploys Daybreak cyber defence tools to support Ukraine
Ukraine’s cyber teams will use OpenAI’s Daybreak system to spot flaws and test fixes faster across critical services under heavy digital attack.
322
Security
US safety regulator probes Comma driver-assist tech after deadly crashes
The NHTSA inquiry raises fresh safety questions about aftermarket driver-assist systems and third-party forks of openpilot.
323
Security
F5 and Arista ship fixes for actively exploited zero-day flaws
Admins of BIG-IP APM and VeloCloud Orchestrator must move quickly as both zero-days are under active attack and already flagged by CISA.
324
Security
Chinese-linked group hits WordPress, ZyXEL gear to steal government data
A Red Heron–linked actor used fresh WordPress and ZyXEL bugs to raid government and small-business systems worldwide for credentials and personal data.
325
Security
Microsoft and partners disrupt EvilTokens phishing service after 12,000 account breaches
The takedown hits a service that automated device-code phishing at scale, largely against enterprise Microsoft accounts worldwide.
326
Security
Sweden fines Miljödata after breach exposing data of 2.2 million people
The GDPR ruling highlights weak security at a key municipal IT supplier and opens the door to more probes of local authorities.
327
Security
ShinyHunters claims FBI breach exposing employee and applicant data
Alleged theft of terabytes of FBI personnel records and defacement of FBIJobs.gov raises fresh questions over the agency’s data security.
328
Security
ClosedQuorum malware hands Windows attack decisions to AI models
The implant’s AI-led automation could speed up attacks and let them unfold at any time after infection.
329
Security
CISA flags active exploits of three Linux kernel bugs and Zyxel switch flaw
Federal agencies must rapidly patch and investigate Linux and Zyxel devices as exploits and public PoC code drive real‑world attacks.
330
Security
Ukrainian naval drone sinks Russian explosive drone boat in first USV clash
The Black Sea encounter marks the first recorded battle between uncrewed surface vessels in the war.
331
Security
WordPress Click2Shell bug allows remote code execution via theme preview
Admins on unpatched sites can be tricked into installing themes that execute PHP, exposing files, data and accounts.
332
Security
Hackers expose Flock camera keys and detailed roadside tracking
Leaked data and software show broad surveillance of people and vehicles as lawmakers move to rein in Flock-style cameras.
333
Security
Malicious npm btree packages hide loaders in runtime code, not install scripts
The campaign bypasses npm v12’s install-time checks and has already landed in projects via millions of downloads.
334
Security
Swedish startup demos fully autonomous NATO attack drone with onboard AI
The loitering munition detects, selects and strikes targets offline, raising fresh questions over human control in armed conflict.
335
Security
WaterPlum malware campaign hits 30,000 devices via fake dev job interviews
North Korea-linked operators are using fraudulent developer hiring to steal crypto and infiltrate employers’ networks.
336
Security
Google analyst infiltrated TeamPCP as supply‑chain hacks unfolded
The inside access let Google track the campaign, warn targets and feed police data that preceded two arrests in Australia.
337
Security
BragJack shows one malicious extension can hijack AI browser agents
The attack turns trusted AI assistants into high‑privilege proxies once a rogue Chrome‑style extension is installed.
338
Security
CenterPoint Energy says attacker accessed customer data via online system
Utility reports a data breach affecting some customer records but says energy services remain unaffected.
339
Security
FBI, Coast Guard board hacked oil tankers in Gulf of Mexico
US agencies inspected two U.S.-bound tankers after network breaches, as officials probe possible Iranian involvement.
340
Security
Scammers slip AI tracks onto real artists’ Spotify and streaming profiles
AI fakes exploiting distributor loopholes are forcing Spotify and others to tighten identity checks and release controls.