⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article covers two Windows privilege escalation zero-days patched by Microsoft in September 2026. Both flaws are already exploited in the wild, affecting ALPC and Windows Update Stack, and CISA has added them to the KEV catalog with a remediation deadline.
This article reports that Google has fixed a seventh Chrome zero-day in 2026, CVE-2026-87491, a V8 out-of-bounds write exploited in the wild. The flaw enables arbitrary code execution inside the browser sandbox, and Google has released updates for all platforms.
US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy The U.S. government took action on Wednesday against a Telegram-based illicit marketplace facilitating billions of dollars in transactions connected to cyber scams, money laundering, human trafficking and other crime. The Treasury Department imposed sanctions on the Chinese-language platform, Xinbi Guarantee, and two businesses it accused of supporting the marketplace's operations.
U.S. government agencies have accused six Chinese artificial intelligence companies of systematically extracting billions of tokens from frontier AI models through a coordinated distillation campaign. The companies allegedly used automated queries and bulk API access to copy knowledge from models like OpenAI GPT and Anthropic Claude.
Security teams are starting to actively use AI for security work, including vulnerability triage, penetration testing, threat modeling, incident response, and code review. The promise is speed, but a security tool that moves fast and raises too many false alarms doesn’t save time.
The U.S. Department of Justice (DoJ) on Wednesday announced coordinated actions aimed at an illicit online marketplace called Xinbi Guarantee that offered scam services, including seizing Telegram channels used to run the service, confiscating two cryptocurrency wallets, and deploying the Scam Center Strike Force to Madagascar to help disrupt 13 scam compounds run by Chinese organized crime syndicates.