Researchers Used Claude to Hack OpenAI Through an Image Flaw
HEIF Heist chains libheif flaws like CVE-2026-32882 into RCE across OpenAI, Slack, Meta, Discourse, Next.js and…
Category
Security
How Google Broke TeamPCP From the Inside
Google's Mandiant ran an undercover analyst inside TeamPCP, revoked stolen credentials at AWS and Microsoft, and…
cups2root: New CUPS Zero-Day Escalates lpadmin to Root
cups2root is a new CUPS zero-day that escalates lpadmin users to root on Ubuntu — and…
Anthropic Threat Report Says AI Now Rebuilds Malware
Anthropic published its fourth threat intelligence report on 10 September 2026, documenting misuse of its Claude…
WeWorm: Zero-Click WeChat Worm Hijacks iOS and Android
Security firm Calif has disclosed WeWorm, a zero-click worm that hijacks WeChat accounts via a regular…
FalconFlank Zero-Day Hits CrowdStrike Falcon Sensor
A security researcher known as Chaotic Eclipse has released FalconFlank, a proof-of-concept zero-day that escalates privileges…
Stale GitHub Token Let ChainDrop Worm Poison Keyv, Cacheable
Jared Wray, founder and CEO of Hyphen AI and maintainer of the Keyv and Cacheable npm…
PrettyPrague Zero-Day Exploit Hits Avast Antivirus
A security researcher known as Chaotic Eclipse has released a working proof-of-concept exploit for an unpatched…
Virtualizor Compromised via BGP Hijack, Hosts Hit Hard
A BGP hijack against Virtualizor’s update infrastructure pushed a malicious package onto VPS hypervisors running the…