A Critical Patch Day for Apple, with Over 30 Security Flaws Fixed Across iOS, macOS, and Safari Apple has just released a massive security update, patching over 30 vulnerabilities across its operating systems and web browser. The update is significant not only because of its scope but also due to the involvement of artificial intelligence … Read more
Highway Signs and Billboards Exposed to Remote Hacking due to Critical Flaws in Daktronics Controllers A critical vulnerability has been discovered in some controllers used by the US-based company Daktronics, potentially allowing hackers to tamper with highway signs and billboards worldwide. The flaws were identified by cybersecurity researcher Thomas Jou, an undergraduate at Princeton University, … Read more
Quantifind Secures $200 Million to Fuel Global Expansion of AI-Powered Risk Intelligence Platform In a significant development for the cybersecurity industry, Quantifind has announced that it has raised $200 million in a growth funding round, bringing its total funding to nearly $320 million. The investment will enable the company to accelerate its international expansion into … Read more
Cloud Credential Theft Exploit Highlights Growing Risk in AI Infrastructure A high-severity security vulnerability in Amazon Web Services’ (AWS) developer extension for Visual Studio Code has been fixed, but not before researchers demonstrated how attackers could execute arbitrary code and steal cloud credentials by exploiting a weakness in Model Context Protocol (MCP) servers. This flaw … Read more
**Nation-State Attackers Target Water Systems for Sabotage** A disturbing trend has emerged in the world of cybersecurity, as nation-state attackers have been breaching water systems in the United States and abroad, exploiting weak passwords, exposed programmable logic controllers (PLCs), and poor segmentation. The threat actors behind these attacks are not sophisticated malware creators, but rather … Read more
A newly disclosed vulnerability, tracked as CVE-2026-46817, is actively being exploited in the wild against Oracle’s E-Business Suite, putting thousands of businesses at risk. The flaw, which resides in a critical component of the suite, has been detected by security researchers who warn that attackers can use it to execute arbitrary code on affected systems. … Read more
WhatsApp is taking a significant step towards enhancing user privacy with the introduction of its username feature, set to launch later this year. This new functionality will enable users to communicate on the platform without exposing their phone numbers, addressing long-standing concerns about sharing personal contact information. With over three billion users worldwide, WhatsApp’s massive … Read more
Cloud Credential Theft Exploits Amazon Q Developer Extension Flaw A high-severity security vulnerability in the Amazon Q developer extension has been fixed by AWS, but not before attackers could have exploited it to steal cloud credentials. The flaw, discovered by researchers from Wiz Research and tracked as CVE-2026-12957, allowed malicious code to execute arbitrarily and … Read more
Nation-state attackers from Iran, Russia, and China have been targeting water systems around the world for sabotage purposes. According to a recent report by DomainTools, these attacks are often carried out through low-tech means, such as exploiting weak passwords or exposing Programmable Logic Controllers (PLCs), rather than sophisticated malware. The threat intelligence provider has been … Read more
In a groundbreaking move to push back against the pervasive use of facial recognition technology, a researcher is set to unveil a new line of clothing that can “confuse” and even “break” current AI-powered surveillance systems. Bill Swearingen, aka @hevnsnt, will debut his innovative solution at Black Hat USA 2026 next month, offering a much-needed … Read more