Binance Links $6.3B Crypto Theft to Compromised DevOps Laptop
Binance linked a record $6.3 billion cryptocurrency theft across 10 blockchains to a compromised DevOps engineer laptop, while…
5 min read
Cybersecurity
Reporting on Cybersecurity from Lazy Tensor.
Search this sectionA place, person or subject
Showing 26 stories tagged Security
Turn off filter ×Matching reporting
Volt Typhoon “Silent Train” Network Exploits Four Zero-Day Flaws
Security researchers at Lumen Technologies’ Black Lotus Labs have detailed “Silent Train,” an ephemeral in-memory operational relay…
4 min read
Check Point, Oracle, Anima, and C-BRAIN Roll Out Frontier AI Systems
Check Point Research adopted OpenAI’s Daybreak cyber capability to shrink binary vulnerability analysis from hours to minutes, Oracle…
3 min read
Malicious AGENTS.md Files in Downloads Folder Used to Hijack AI Coding Agents
Researchers at Forever Security discovered a real-world attack in which a malicious AGENTS.md file in a user’s ~/Downloads directory…
3 min read
1Password Reports 20.9 Percent Engineering Productivity Gain and Faster Pull Request Cycles Using OpenAI Codex
Enterprise identity security leader documents 10.9 percent reduction in code review turnaround across 600 engineers before expanding…
2 min read
Microsoft Confirms October KB5127648 Windows 11 Update Disables Smart App Control Toggle
Known issue grays out security setting on Windows 11 version 24H2 and later systems, prompting temporary registry and Group Policy…
2 min read
Proofpoint Agrees to Acquire Data Security Leader Varonis in $6.3 Billion All-Cash Deal
California cybersecurity pioneer merges email and identity threat defense with automated data visibility to protect over 16,000 global…
3 min read
Matching reporting
Microsoft Distrusts eMudhra Certs as Hive Affiliate Gets 70 Months
Microsoft released out-of-band Windows updates KB5134133 and KB5134125 after eight eMudhra intermediate CA private keys were found to…
3 min read
Apple Backports CoreGraphics Zero-Day Fix as CISA Flags PHP2Shell
Apple backported fixes for the actively exploited CVE-2026-86950 CoreGraphics zero-day to older iPhones and iPads, while CISA ordered…
2 min read
Tailscale Warns of 11 ‘Tailworm’ Flaws Including Root SSH Escalation
Tailscale confirmed it is working to release a patched client by the end of Tuesday, Oct. 27, to fix 11 vulnerabilities—collectively…
2 min read
Warp Discloses Vendor Breach Exposing AI Agent Logs and Telemetry
Warp founder and CEO Zach Lloyd disclosed that an attack on a third-party vendor in Warp’s infrastructure exposed AI agent decision…
1 min read
University of Copenhagen Breach Hits 525K; DreamHost Resets Passwords
The University of Copenhagen confirmed that hackers accessed a test environment containing personal data of 525,000 people and exposed…
2 min read
Critical PHP2Shell RCE Flaws Confirmed Exploited in the Wild Against Apache mod_php
Two critical remote code execution vulnerabilities tracked as PHP2Shell (CVE-2026-109618 and CVE-2026-109619) have been confirmed…
3 min read
Unrevoked Master Key Behind LiteLLM PyPI Malware Downloaded 49,000 Times
Open-source AI developer tool LiteLLM reported that an unrevoked master key accidentally exposed in a configuration file in May…
3 min read
DHS orders DeepSeek models off civilian government devices
Federal cybersecurity agency mandates removal of offshore AI foundation models from government-issued hardware, citing telemetry and…
2 min read
Hackers used AI agents to breach John Deere, SharkNinja and Cummins
Novel threat vectors demonstrate multi-step agentic lateral movement through enterprise identity systems, prompting urgent CISA…
2 min read
Attackers gain root through SiteGuard WAF flaw CVE-2026-106931
JPCERT/CC and cybersecurity researchers warn of active in-the-wild exploitation targeting SiteGuard Server Edition web application…
2 min read
OpenAI puts $1bn behind cyber defense for utilities and towns
San Francisco-based OpenAI launches its $1 billion Daybreak for Frontline Defenders program to equip water agencies, electric grid…
2 min read
Drupal patches critical remote-code flaws across a million portals
Cybersecurity administrators across San Francisco and East Bay municipal agencies scramble to update over one million portals as…
2 min read
ConnectWise backup breach reaches 162 Microsoft 365 tenants
Incident responders from Microsoft, Huntress, and Todyl confirm OAuth token rotation and urge Bay Area enterprise CISOs to audit…
2 min read
CISA Adds Critical Fortinet and BeyondTrust Zero-Day Vulnerabilities to Known Exploited Catalog
Federal cybersecurity agency mandates urgent federal civilian agency patching after nation-state threat actors weaponize appliance…
2 min read
Unit 42 Uncovers PEERSTITCH Memory-Resident Implant Targeting FortiGate Enterprise Firewalls
Security researchers identify sophisticated ARM64 in-memory backdoor exploiting edge appliance vulnerabilities to maintain stealthy…
2 min read
Matching reporting
CISA and Unit 42 Issue Urgent Patch Directive for Critical PHP2Shell Remote Code Execution Flaws
PHP maintainers release emergency 8.5.12 and 8.4.27 security updates as defenders mitigate active exploitation across cloud servers.
2 min read
Matching reporting
DHS cites unverified weights in government-wide DeepSeek ban
Federal cyber authorities cite unverified model weights, undisclosed data routing, and foreign supply-chain risks in mandatory…
2 min read