🕵️ RESEARCH & DEEP DIVES
AI’s Vulnerability Surge May Be More Manageable Than First Feared — Dark Reading
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access — Microsoft Security Blog
Out-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing ... — CVE ThreatInt
RightNow-AI OpenFang tool_runner.rs shell_exec memory allocationA weakness ha... — CVE ThreatInt
simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py... — CVE ThreatInt
Smashing Security podcast #483: This AI helps thieves steal your iPhone — Graham Cluley
Woot. — @briankrebs@infosec.exchange
On the odd chance that anyone was actually wondering, no, I'm not suddenly running a ransomware affiliate program... — @briankrebs@infosec.exchange
FIDO2 Credential Registration Bypass Leads to Account Takeover (CVE-2026-19117) — thehackerwire.com (discovered)
Cisco IOS XR: High Severity Exception Handling (CVE-2026-20280) — thehackerwire.com (discovered)
Google Launches Fairwind Program for Gemini 3.8 Flash Cyber Access — securityboulevard.com (discovered)
AI Agent Security Starts with Identity: Three Questions Every Enterprise Should Answer — securityboulevard.com (discovered)
My Manager Wants More AI. I Want More Honesty. — securityboulevard.com (discovered)
Cybersecurity for Manufacturing — securityboulevard.com (discovered)
QR Phishing With No Image: Text-Only QR Codes for Inboxes w/ Images Disabled — r/netsec