Hardware Hazard: Unpatched Tenda Firmware Backdoor Grants Admin Access (CVE-2026-11405)
Executive Summary
A critical, undocumented security backdoor has been uncovered in multiple firmware versions powering Tenda routers, switches, and network devices. Tracked as CVE-2026-11405 and...
Detector to Defector: Microsoft Patches Critical "RoguePlanet" Defender Zero-Day (CVE-2026-50656)
Executive Summary
Microsoft has officially released a critical patch addressing CVE-2026-50656, popularly known as "RoguePlanet", a high-profile local privilege escalation (LPE) zero-d...
Biometric Data Breach: MSG Entertainment Faces Lawsuits After Leak of Facial Recognition Datasets
Executive Summary
A major class-action lawsuit has been filed against MSG Entertainment (Madison Square Garden, Radio City Music Hall, and associated venues) following a significant da...
AI Developer Threat: New 'HalluSquatting' Attack Hijacks AI Coding Assistants to Build Botnets
Executive Summary
Security researchers have disclosed a highly novel, dangerous cyber threat targeting software development teams utilizing AI-driven coding environments. Named HalluSquat...
Edge Device Threat: Undocumented Backdoor Discovered in Tenda Device Firmware
Executive Summary
The CERT Coordination Center (CERT/CC) at Carnegie Mellon University has issued a critical vulnerability warning detailing an undocumented, hardcoded administrative backdoor affecting mu...
E-Banking Fraud: SCMBANKER Malware Leverages 'ClickFix' Lures to Hijack Financial Terminals
Executive Summary
Security researchers at Elastic Security Labs have disclosed a highly targeted, hands-on financial fraud campaign targeting banking, fintech, and cryptocurrency users acros...
Government Sector Leak: Puerto Rico's CRIM Exposes 1 Million Social Security Numbers
Executive Summary
A severe, low-complexity data exposure has been uncovered within Puerto Rico's primary municipal tax collection agency, the Centro de Recaudación de Ingresos Municipales (CRIM). R...
Insurance Sector Breach: AssuranceAmerica Discloses Leak Exposing 6.9M Driver's License Numbers
Executive Summary
Atlanta-based auto and renters insurance provider AssuranceAmerica has begun notifying state attorneys general and customers of a catastrophic data breach affecting 6.9...
Autonomous Threat: JadePuffer Ransomware Integrates AI Agent to Automate Attacks
Executive Summary
The integration of artificial intelligence (AI) into cybercriminal workflows has reached a dangerous milestone. Security researchers have disclosed details of a newly emerged ransomwa...
Critical Patch: BeyondTrust Fixes Pre-Auth Authentication Bypass Flaws in Remote Access Software (CVE-2026-40138 & CVE-2026-40139)
Executive Summary
BeyondTrust, a global leader in privileged access management (PAM), has released critical security updates addressing two severe pre-...
Espionage Leak: Russian Hackers Exfiltrate and Sell British Government Logins
Executive Summary
A critical national security leak has surfaced on underground dark web forums, following a successful cyber espionage campaign executed by Russian-aligned threat actors. The group manage...
AI Workflow Threat: Critical 'GitLost' Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection
Executive Summary
Security researchers at Noma Labs have disclosed a critical prompt injection vulnerability in GitHub Agentic Workflows. Dubbed GitLost, the vulnerability allo...