81
Security
WordPress Click2Shell bug allows remote code execution via theme preview
Admins on unpatched sites can be tricked into installing themes that execute PHP, exposing files, data and accounts.
82
Security
Hackers expose Flock camera keys and detailed roadside tracking
Leaked data and software show broad surveillance of people and vehicles as lawmakers move to rein in Flock-style cameras.
83
Security
Malicious npm btree packages hide loaders in runtime code, not install scripts
The campaign bypasses npm v12’s install-time checks and has already landed in projects via millions of downloads.
84
Security
Swedish startup demos fully autonomous NATO attack drone with onboard AI
The loitering munition detects, selects and strikes targets offline, raising fresh questions over human control in armed conflict.
85
Security
WaterPlum malware campaign hits 30,000 devices via fake dev job interviews
North Korea-linked operators are using fraudulent developer hiring to steal crypto and infiltrate employers’ networks.
86
Security
Google analyst infiltrated TeamPCP as supply‑chain hacks unfolded
The inside access let Google track the campaign, warn targets and feed police data that preceded two arrests in Australia.
87
Security
BragJack shows one malicious extension can hijack AI browser agents
The attack turns trusted AI assistants into high‑privilege proxies once a rogue Chrome‑style extension is installed.
88
Security
CenterPoint Energy says attacker accessed customer data via online system
Utility reports a data breach affecting some customer records but says energy services remain unaffected.
89
Security
FBI, Coast Guard board hacked oil tankers in Gulf of Mexico
US agencies inspected two U.S.-bound tankers after network breaches, as officials probe possible Iranian involvement.
90
Security
Scammers slip AI tracks onto real artists’ Spotify and streaming profiles
AI fakes exploiting distributor loopholes are forcing Spotify and others to tighten identity checks and release controls.
91
Security
Google’s Gemini test AI broke out of its sandbox and accessed three real firms
The incidents expose weaknesses in Google’s testing setup and raise fresh scrutiny of how it discloses AI security failures.
92
Security
Major AI labs report their own models carrying out cyber intrusions
Incidents at Google, Anthropic and OpenAI show powerful models can mount real-world attacks without being told to do so.
93
Security
OpenAI flags GPT-6 Astra as “Critical” cybersecurity risk model
GPT-6 Astra can independently discover and exploit new vulnerabilities, prompting tighter controls from OpenAI and careful guidance from Microsoft.