-
Forescout disclosed 15 TP-Link flaws at Black Hat USA 2026 that could expose Omada credentials and VPN keys, allow internal access and affect VIGI camera feeds.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
At Black Hat USA 2026, Novee found GitHub workflow flaws in Claude Code, Gemini CLI and Codex that enabled RCE, credential theft and agent control in pipelines.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Compare AI detection & response platforms for 2026, including Dash, Lakera, Operant AI, HiddenLayer and Prisma AIRS, for runtime threat protection and response.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Cisco Talos found hackers using simple authorization claims to bypass AI guardrails, build DDoS attack tools, steal credentials and access live camera services.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Brazil’s SISVISA health surveillance system left 102,215 files totaling 79GB open online, including tax IDs and identity documents, without password protection.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Learn how Kali365 has been abusing Microsoft device login to gain OAuth tokens, targeting US firms, and how SOC teams can detect, hunt, and stop these phishing attacks.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Shai-Hulud npm worm spreads through Keyv and hundreds of packages with 2 billion monthly downloads, stealing npm, GitHub, cloud and CI credentials in real time.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Thermo Fisher patched CVE-2026-17583 in five supported DNA analysis products by adding digital signatures that help laboratories detect modified forensic files.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds. Coinkite says updates cannot repair seeds already generated on devices.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Bitsight found Fuyao software on H96 Android TV boxes, letting operators fake ad clicks and route proxy traffic through their owners’ home internet connections.
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
