⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
A critical vulnerability in SAP Commerce Cloud, tracked as CVE-2026-58231, has been assigned a CVSS score of 10.0 due to insufficient authorization checks and input validation. An unauthenticated attacker can abuse a default authentication client to submit specially crafted input, potentially leading to arbitrary code execution and full compromise of confidentiality, integrity, and availability.
A critical authentication bypass vulnerability in Apple macOS Screen Sharing, tracked as CVE-2026-65400 with a CVSS score of 9.8, is being actively exploited in the wild to deploy Monero cryptocurrency miners on internet-exposed Macs. The Netherlands National Cyber Security Centre (NCSC) reported that attackers gained root access to systems with port 5900 accessible from the internet and installed crypto miners.
Tenable's RSO team tracks a cluster of seven agentic AI offensive incidents from November 2025 through August 2026, anchored by Taiwan's confirmed near-autonomous attack that mapped 21 systems, compromised 85 accounts, and exfiltrated more than 2,564 personnel records. The cluster also includes JADEPUFFER, which exploited CVE-2025-3248 in Langflow to automate database extortion, and the common entry vector is identity and authentication exposure such as discoverable federation endpoints, weak credentials, and misconfigured SSO. Organizations running affected Langflow versions should apply vendor patches immediately and audit exposed authentication surfaces.
Anthropic, the company behind the AI assistant Claude, is working on a method to watermark text generated by its model. This technique would embed an invisible, statistical signature into the AI's output, allowing it to be identified as machine-generated even if the text is paraphrased or edited.
German and Brazilian authorities have made coordinated arrests in connection with a banking hack investigation. Germany's federal police agency, the BKA, announced that three suspects were apprehended in Europe and charged with fraud.
An international investigation into a banking hack has led to arrests on two continents. Germany's federal police agency, the BKA, announced that three suspects were picked up in Europe and formally charged with fraud.