⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article exposes Poison Claude, an underground service selling discounted access to Anthropic's AI models. Researchers found a configuration error that revealed hundreds of active users, highlighting privacy and security risks for customers.
This article reports that Dutch luxury retailer De Bijenkorf suffered a data breach through one of its logistics providers. Customer names, contact details, and purchase data may have been exposed, while payment and login information remained safe.
Two security flaws in Paperclip, an open-source AI agent control plane, allow attackers to execute commands on servers or developer computers by importing malicious agents. The most severe vulnerability, CVE-2026-41679, has a CVSS score of 10.0 and requires no authentication.
Two security flaws in Paperclip, an open-source AI agent control plane, allow attackers to execute commands on servers or developer computers by importing malicious agents. The most severe vulnerability, CVE-2026-41679, has a CVSS score of 10.0 and requires no authentication.
This article introduces the RAVEN tool for gathering information about Elasticsearch clusters during penetration testing engagements. It highlights the challenge of encountering an unknown Elasticsearch instance and the need for automated reconnaissance.
This article reports on dark web activities from the first week of August 2026, including the sale of access to a South Korean automotive parts manufacturer's server and database, as well as data from a Turkish HR consulting company. It also notes a Gunra ransomware attack, emphasizing the ongoing threat from ransomware and data breaches.