Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests

A critical vulnerability has been discovered in Claude Opus 4.6, a popular gym management software used by thousands of fitness centers worldwide. In tests, researchers were able to bypass security limits on bookings and even cancel other users’ reservations, highlighting the ease with which malicious actors could exploit this flaw. Claude Opus 4.6 is designed … Read more

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

Security Teams Reel from Identity Exposures that Fuel Active Attacks, Highlighting Need for AI-Powered Hypothesis Engines A growing trend of identity exposures is turning once-secure systems into ticking time bombs, allowing attackers to exploit privilege escalation and breach even the most robust networks. Behind these seemingly isolated incidents lies a complex web of interconnected vulnerabilities … Read more

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

A newly discovered backdoor, dubbed SLEEPWALKER, has been found lurking in various devices and systems, waiting for a specific packet of data to trigger its malicious functionality. This sleeper agent is particularly concerning because it can run its own bytecode, essentially giving hackers free rein to wreak havoc on compromised systems. SLEEPWALKER’s presence was first … Read more

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

A massive global operation, codenamed Operation Jackal IV, has netted 58 arrests and identified a staggering 263 individuals suspected of involvement in large-scale cyber fraud schemes. The coordinated effort, led by INTERPOL, is a stark reminder that cybercrime knows no borders – and that the authorities are determined to track down those responsible. The operation’s … Read more

OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation

A sophisticated influence operation has been dismantled, with OpenAI taking swift action against a network of Russian-language ChatGPT accounts used to spread disinformation and propaganda. The operation, which had been ongoing since 2025, involved the use of AI-powered chatbots to generate convincing content that was then disseminated through various online channels. According to reports, the … Read more

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests

A newly discovered vulnerability in a popular gym management software, Claude Opus 4.6, has been found to allow hackers to bypass booking limits and even cancel other users’ reservations, raising concerns about data protection and user safety. This exploit was uncovered during internal testing by security researchers at an undisclosed firm. The issue arises from … Read more

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine

**Security Alert Backlogs Finally Get a Breakthrough Solution** Imagine being able to turn your Security Operations Center (SOC) from a reactive alert-backlogged nightmare into an proactive AI-powered threat detection engine. This is exactly what’s happening in the cybersecurity world, thanks to innovative research that’s turning identity exposure into a game-changer for security teams. At its … Read more

Interpol’s Jackal IV Disrupts West African Crime Infrastructure

Global law enforcement agencies have made significant strides in disrupting West African crime syndicates with the latest installment of Interpol’s Jackal operations. The international effort, known as Jackal IV, has resulted in the arrest of 58 suspects and identification of 263 more individuals linked to organized crime groups. At the center of attention are Black … Read more

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

Thieves are using fake Apple support AI calls to trick victims into handing over sensitive information, leaving their devices vulnerable to theft and financial loss. In a disturbing trend, scammers have been posing as representatives from Apple’s technical support team, contacting individuals whose devices have been reported stolen or suspected of being compromised. The goal … Read more

Critical Gitea RCE Actively Exploited as Reported Attack Drops Miner-Like Payload

A Critical Gitea Vulnerability is Being Actively Exploited, Delivering Malicious Payloads to Affected Users Gitea, a popular open-source Git repository manager, has been hit by a critical remote code execution (RCE) vulnerability that’s being actively exploited in the wild. Attackers are targeting this flaw to deliver miner-like payloads, effectively turning compromised Gitea instances into cryptocurrency … Read more