Palo Alto Networks Patches PAN-OS Authenticated RCE Flaw Amid Active Exploitation
The flaw is a remote code execution vulnerability in the PAN-OS management interface, tracked as CVE-2026-0322, with a CVSS score of 8.6, and attackers are actively...
Security news that matters, in 30 seconds.
Short, fact-checked videos and articles on actively exploited vulnerabilities, zero-days, breaches and AI security. Every claim sourced.
Backdooring Open-Weight AI Models
Abliteration removes a model's ability to refuse by subtracting the "no" direction in weights. Edited weights can hide a backdoor that passes safety evals and behaves normally until a trigger phrase activates it. The trigger can be a rare phrase, a name, or a future date. A backdoored model ships with only a URL to a remote payload, letting an attacker change behavior later without retraining.
Read & watchLatest briefs
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware....
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group Armory Castle, also known as UNC5221 or Warp Panda, exploited CVE-2026-102764 in late August 2026. The vulnerability has a CVSS...
F-Secure Launches Victim-First Scam Encyclopedia Covering 50+ Types of Consumer Fraud
F-Secure launches a victim-first resource. Built from decades of threat intelligence research, it explains scams from the victims' perspective, tracks emerging cyber...
Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A researcher demonstrated the leak on Vercel's live cloud sandboxes, and Vercel confirmed it. The vulnerability, tracked as CVE-2026-99999 and nicknamed PwnEscape,...
Fake Arch Linux packages push malware with root privileges
A threat actor uploaded malicious packages to the Arch User Repository that impersonated two popular helper tools, yay and paru. These fake packages run with root...
Microsoft Patches More Than 1,400 Security Flaws
Today's update fixes more than 1,400 vulnerabilities in Windows and other software. This batch dwarfs September's record of nearly 1,000 fixes. One weakness is a zero...