⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Thermo Fisher Scientific patched a high-severity vulnerability in its Applied Biosystems human identification software that could allow data file tampering before analysis. The flaw, CVE-2026-17583, enables modification of .fsa and .hid files without detection, potentially compromising forensic results.
Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification software that could allow data files to be altered before analysis software loads them. The vendor's July 31 security bulletin says nearly undetectable changes to .fsa and .hid outputs could occur if laboratory controls are circumvented.
This article summarizes a week of cybersecurity news from Malwarebytes Labs, covering scams like fake Fortnite rewards and Flash Player installs, privacy issues with Hims & Hers and shared Claude chats, and threats including AI worms and fake Walmart stores. It also notes product updates like Malwarebytes for Windows on the Microsoft Store and rebuilt mobile security.
Fake Fortnite rewards are stealing players' accounts, AI robocalls plague caller ID, OpenAI explains Hugging Face breach — this week's roundup from Malwarebytes Labs.
This article reports that attackers exploited an authentication bypass vulnerability (CVE-2026-18577) in N-able's N-central platform to gain remote administrative access and compromise customer systems. N-able's initial fix was incomplete, and the attackers used the access to install persistent Cloudflare tunnels on managed endpoints.
This article discloses three high-severity security flaws in Hugging Face's Diffusers library, named FaceHugger, which allow crafted model repositories to execute arbitrary code by bypassing the trust_remote_code safeguard. The vulnerabilities pose significant risk to AI supply chains due to Diffusers' widespread use in enterprise environments.