Archive
3,385–3,396 of 3,915 items
Attackers Pounce on Critical Artifactory Bug Following Disclosure
CVE-2026-82329 is an authentication bypass flaw in JFrog's repository manager that enables bad actors to gain admin-level access on affected systems.
Sep 01, 2026 · StaffOriginally on Wedgetail
Stronger Security Drives Ransomware Groups to Recruit From Within
Some security researchers have observed an uptick in insider-assisted ransomware attacks, but malicious insiders pose other threats that cost companie...
Sep 01, 2026 · StaffOriginally on Wedgetail
Critical Langflow Vulnerability Exploited as Attacks on AI Platform Rise
The attacks targeting CVE-2026-0768 are the latest threat against the low-code AI development platform, which is receiving more attention from adversa...
Sep 01, 2026 · StaffOriginally on Wedgetail
AI Model Evaluator METR Hit by Credential Theft, Probing
In one attack, threat actors stole an API key that ultimately led to the consumption of $600,000 in public AI model credits for the security nonprofit...
Sep 01, 2026 · StaffOriginally on Wedgetail
What the US executive order on bulk-power systems gets right—and what’s missing
The recently announced executive order on the US bulk-power system orders a sweeping review of security vulnerabilities. Experts assess the key opport...
Sep 01, 2026 · StaffOriginally on Wedgetail
Russia wants to sell ‘sovereign AI’ abroad. Here’s what it’s really selling.
Russia’s new AI law puts domestic models under state control. Moscow now wants to sell the same model abroad. The post Russia wants to sell ‘sovereign...
Sep 01, 2026 · StaffOriginally on Wedgetail
Stopgap funding bill temporarily extends key cyber info-sharing law
The short-term package pushes the sunset date for the bedrock cyber legislation to Dec. 11.
Sep 01, 2026 · StaffOriginally on Wedgetail
Attackers Exploit Critical JFrog Artifactory Flaw to Mint Admin Tokens Days After Disclosure
Threat actors are exploiting a newly patched critical security flaw impacting JFrog Artifactory merely days after public disclosure, according to watc...
Sep 01, 2026 · StaffOriginally on Wedgetail
Breeze Comet Executes Hundreds of Fraudulent Transactions via Brazilian Payment Systems
Brazilian financial services, retail, and e-commerce organizations have become the target of a financially motivated threat actor dubbed Breeze Comet ...
Sep 01, 2026 · StaffOriginally on Wedgetail
Leaked Russian Cyber-Operations Training Materials
This is interesting: The records describe a force-generation mechanism for several General Staff components, including the GRU, Main Operational Direc...
Sep 01, 2026 · StaffOriginally on Wedgetail
Attackers Steal METR API Key and Burn $600,000 in AI Credits
Attackers used a stolen METR API key for three weeks, consuming model credits worth $600,000
Sep 01, 2026 · StaffOriginally on Wedgetail
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript into Vietn...
Sep 01, 2026 · StaffOriginally on Wedgetail