Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution

A critical vulnerability in Unsloth Studio has been patched after researchers discovered that malicious AI models could execute arbitrary Python code during routine model inspection. The flaw, which was introduced through the “trust_remote_code” setting, has far-reaching implications for users of open-source library Unsloth, a popular tool used for fine-tuning and quantizing large language models. The … Read more

Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

Apple has just patched a critical zero-day vulnerability in its operating systems, which has been exploited by attackers in targeted attacks against specific individuals. The vulnerability, tracked as CVE-2026-86950, affects Apple’s CoreGraphics framework and can allow an attacker to execute arbitrary code on an affected system. The flaw is particularly concerning because it can be … Read more

Microsoft is rolling out Linux container support to WSL

Windows Subsystem for Linux (WSL) has been a game-changer for developers and power users who want to run Linux on their Windows machines. But until recently, it was limited to just running Linux distributions – not Linux containers. That’s all changed with the general availability of WSL Containers, which brings Linux container support to the … Read more

Apple Zero-Day Vulnerability Weaponized in Targeted Attacks

Apple has just released new versions of iOS and macOS to address a zero-day vulnerability that’s being actively exploited in targeted attacks. The flaw, tracked as CVE-2026-86950, affects Apple’s CoreGraphics framework, which is used by both operating systems to render and manipulate 2D graphics. The vulnerability allows an attacker to execute arbitrary code on an … Read more

Automated AI agent used to breach cybersecurity nonprofit DIVD

A Major Breakthrough in Cyberattacks: Dutch Nonprofit DIVD Falls Victim to an AI-Driven Breach In a shocking turn of events, the Dutch Institute for Vulnerability Disclosure (DIVD) has been hacked by an automated AI agent that exploited a vulnerability in one of its systems. The attack was described by DIVD as “loud and very messy,” … Read more

New Spectre v2 attack variant leaks Linux root password hash in minutes

A newly discovered variant of the Spectre v2 attack, dubbed Branch Target Reuse (BTR), can steal Linux root password hashes from Intel computers in just a few minutes. This vulnerability affects not only high-security systems but also everyday users who rely on Linux-based operating systems. Researchers at VUsec and Scuola Superiore Sant’Anna discovered the new … Read more

Hackers exploit Citrix NetScaler zero-day to deploy web shells

A Critical Citrix Zero-Day Exploit Exposes Organizations to Web Shells and Malware Citrix NetScaler appliances have been breached by hackers exploiting a zero-day vulnerability, allowing attackers to gain root access, steal credentials, and spread malware into internal networks. The attacks, which began in early September, have affected organizations across North America and Europe, including government … Read more

Microsoft is rolling out Linux container support to WSL

As of today, Microsoft has officially rolled out Linux container support to its Windows Subsystem for Linux (WSL), taking a significant step towards making it easier for developers to work seamlessly across different operating systems. This major upgrade allows users to run and deploy Linux containers directly on their Windows machines, opening up new possibilities … Read more