Cloud Credential Theft Exploit Highlights Growing Risk in AI Infrastructure A high-severity security vulnerability in Amazon Web Services’ (AWS) developer extension for Visual Studio Code has been fixed, but not before researchers demonstrated how attackers could execute arbitrary code and steal cloud credentials by exploiting a weakness in Model Context Protocol (MCP) servers. This flaw … Read more
**Nation-State Attackers Target Water Systems for Sabotage** A disturbing trend has emerged in the world of cybersecurity, as nation-state attackers have been breaching water systems in the United States and abroad, exploiting weak passwords, exposed programmable logic controllers (PLCs), and poor segmentation. The threat actors behind these attacks are not sophisticated malware creators, but rather … Read more
A newly disclosed vulnerability, tracked as CVE-2026-46817, is actively being exploited in the wild against Oracle’s E-Business Suite, putting thousands of businesses at risk. The flaw, which resides in a critical component of the suite, has been detected by security researchers who warn that attackers can use it to execute arbitrary code on affected systems. … Read more
WhatsApp is taking a significant step towards enhancing user privacy with the introduction of its username feature, set to launch later this year. This new functionality will enable users to communicate on the platform without exposing their phone numbers, addressing long-standing concerns about sharing personal contact information. With over three billion users worldwide, WhatsApp’s massive … Read more
Cloud Credential Theft Exploits Amazon Q Developer Extension Flaw A high-severity security vulnerability in the Amazon Q developer extension has been fixed by AWS, but not before attackers could have exploited it to steal cloud credentials. The flaw, discovered by researchers from Wiz Research and tracked as CVE-2026-12957, allowed malicious code to execute arbitrarily and … Read more
Nation-state attackers from Iran, Russia, and China have been targeting water systems around the world for sabotage purposes. According to a recent report by DomainTools, these attacks are often carried out through low-tech means, such as exploiting weak passwords or exposing Programmable Logic Controllers (PLCs), rather than sophisticated malware. The threat intelligence provider has been … Read more
In a groundbreaking move to push back against the pervasive use of facial recognition technology, a researcher is set to unveil a new line of clothing that can “confuse” and even “break” current AI-powered surveillance systems. Bill Swearingen, aka @hevnsnt, will debut his innovative solution at Black Hat USA 2026 next month, offering a much-needed … Read more
India’s Government IT Systems Left Exposed to Cyber Threats, 14 Vulnerabilities Found A recent discovery by an independent security researcher has left Indian government IT systems vulnerable to cyber threats, exposing sensitive citizen data. The vulnerabilities, identified in April by Sushant Bhardwaj, affect major national platforms used by millions of students and job aspirants. Thankfully, … Read more
A Graphic Tee Solution to Facial Recognition Overreach? In a bold move to counter the pervasive use of facial recognition technology, an innovative solution is emerging. Bill Swearingen, aka @hevnsnt, will unveil his concept at Black Hat USA 2026 next month – graphic tees that can potentially confuse or break current AI-powered facial recognition systems. … Read more
A Critical Vulnerability Exposes Private Data in Indian Government Systems In a stark reminder of the importance of cybersecurity, an independent security researcher has uncovered 14 vulnerabilities affecting Indian government IT systems, putting millions of citizens’ personal data at risk. The discoveries, made by Sushant Bhardwaj, were promptly addressed by the government, but not before … Read more