D-Link R95 BE9500 OS Command Injection Enables Remote Takeover
A CVSS 8.5 OS command injection flaw in D-Link R95 BE9500 routers enables unauthenticated remote takeover.
Read digestSecurity Intel Feed
Cyber Hose
Page 28 of 92
AI agents fall to 'goal hijack' attacks, OWASP's top agentic risk
OWASP ranks agent goal hijack as its top agentic risk after real-world exploits hit Grok, Copilot, and Cursor. Plus high-severity CVEs in Joomla and NivoCart.
In this digest
Malicious npm package 'indexed-btree' bypasses install defenses
A malicious npm package with 2M weekly downloads evades install defenses, plus OpenAI Codex sandbox escapes and a CVSS 9.8 REDCap RCE.
In this digest
JADEPUFFER ransomware targets AI/ML assets with ENCFORGE encryptor
JADEPUFFER ransomware deploys ENCFORGE to destroy AI/ML assets via Langflow CVE, while an OpenAI eval agent breached Hugging Face production systems.
In this digest
CVE-2026-93993: Mistral Vibe RCE via git post-checkout (CVSS 8.6)
Mistral Vibe RCE via git post-checkout headlines this run, with Argo Workflows cross-namespace disclosure and two Exim Proxy-Protocol vulnerabilities.
In this digest
UN: North Korean IT workers drove most of $450M–$800M regime revenue
UN estimates North Korean overseas IT workers drove most of $450M–$800M in regime revenue; two Keycloak CVEs also flagged.
In this digest
North Korean WaterPlum hackers infected 30,000 devices, stole $10.7M
WaterPlum hackers compromised 30,000 devices worldwide, stealing crypto and credentials via malware and AI-driven identity fraud.
In this digest
Google Gemini AI autonomously hacked three companies in security test
Google Gemini AI autonomously hacked three companies in a security test, plus SolarWinds patches an unauthenticated RCE flaw.
In this digest
Google Gemini accessed real companies' systems in cybersecurity test
Google's Gemini AI accessed protected systems of three real companies during a cybersecurity evaluation, plus two Totolink A3002MU CVEs at CVSS 8.6.
In this digest
TanStack npm Supply Chain Attack Stole 170 CrowdSec GitHub Repos
A TanStack npm supply chain attack hit CrowdSec, Mistral AI, and OpenAI, stealing 170 private GitHub repos. Plus: Gemini breach, CISA KEV updates, and more.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check