Uncategorized

Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoS 2026-06-10 at 09:55 By Cybersecurity researchers have flagged half a dozen vulnerabilities in protobuf.js, a JavaScript and TypeScript implementation of Protocol Buffers (Protobuf), that, if successfully exploited, could result in remote code execution (RCE) and denial-of-service (DoS) attacks. “In affected environments, a single […]

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows 2026-06-10 at 09:55 By The anonymous security researcher going by the name Chaotic Eclipse (aka Nightmare-Eclipse) has released a proof-of-concept (PoC) exploit for yet another Microsoft Defender zero-day named RoguePlanet. “The exploit is a race condition, so it’s a hit or miss,” the researcher, who

Kalshi now requiring users to disclose employers for some bets after string of insider trading scandals 2026-06-10 at 04:14 By Marc Vartabedian Kalshi, which allows users to bet on an array of topics, plans to require some users to disclose their employers – after a string of insider trading scandals have rocked so-called prediction market

Anthropic, which claimed AI model was too risky for public to use, releases ‘safe’ version 2026-06-10 at 00:46 By Marc Vartabedian Anthropic is launching the next iteration of its powerful artificial intelligence models to the general public – but with guardrails that cap its ability to wreak havoc in areas like cybersecurity and biological research.

Elon Musk’s SpaceX is set to shatter IPO records — but experts warn regular investors should be wary 2026-06-10 at 00:02 By Thomas Barrabi SpaceX, known for its rocket launches, Starlink satellite internet network and artificial intelligence wing xAI, is selling stock at $135 per share when it begins trading on the Nasdaq exchange under

Scaring college kids about AI coming for their jobs is the worst thing commencement speakers could have done 2026-06-09 at 22:40 By Rikki Schlott At least 25 graduating classes heard some version of the AI spiel — not exactly original insight to inspire the next stage of life. This article is an excerpt from Latest Technology

OT Cybersecurity Is Maturing, But Visibility Is Still a Challenge 2026-06-09 at 22:39 By 23% of survey respondents have visibility into only half of their OT environment. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code 2026-06-09 at 22:39 By Veeam has released security patches to address a critical flaw in its Backup & Replication software that could result in remote code execution. Tracked as CVE-2026-44963, the vulnerability carries a CVSS score of 9.4 out of a maximum of

Meta to Use Off-Site Business Data for Feed and AI Personalization 2026-06-09 at 22:39 By Meta on Tuesday announced that it will use information shared by other businesses to personalize users’ feed and responses from its artificial intelligence (AI) chatbot, expanding its scope beyond targeted ads. “Businesses often share information about people’s activity on their

Oxford University Discloses Data Breach 2026-06-09 at 20:08 By Oxford University disclosed it experienced a data security incident.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues 2026-06-09 at 20:08 By Microsoft on Monday confirmed that it temporarily removed some GitHub repositories in response to a recent security incident that led to 73 of its open-source projects being compromised to inject an information stealer into the code. “Our priority is

WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine 2026-06-09 at 18:18 By Two Russia-aligned cyber attack campaigns have continued to exploit a security flaw in WinRAR to target Ukrainian organisations, almost a year after patches for the vulnerability were released. The activity has been attributed by Trend Micro to Earth Dahu (aka

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild – Patch Now 2026-06-09 at 18:18 By Google has released security updates to address 74 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-11645 (CVSS score: 8.8), has been described as an out-of-bounds memory access in V8, Chrome’s

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models 2026-06-09 at 18:18 By University of Toronto researchers have built and tested a proof-of-concept AI-driven computer worm that uses a locally hosted open-weight large language model to reason its way through a network, generate tailored attack strategies for each target it encounters, and

The Hidden Security Risk in Modern Networks: The Work Between Tools 2026-06-09 at 15:21 By Organizations have more visibility than ever. Growing tech stacks provide greater coverage, and network security teams are increasingly adopting AI and automation to help with routine tasks and reduce manual effort. But the same challenges persist. Outages still last hours,

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing 2026-06-09 at 14:00 By A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. The attack, called FROST, needs no native code, no extension, and

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer 2026-06-09 at 14:00 By The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the Python Package Index (PyPI) registry, as the Mini Shai-Hulud-style attacks continue to be refined and

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE 2026-06-09 at 09:42 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-42271 (CVSS score: 8.7), is a command

ChatGPT maker OpenAI files for IPO looking to capitalize on investor appetite for AI boom 2026-06-09 at 03:10 By Marc Vartabedian OpenAI has been scrambling to polish up its finances and pave a clear path to becoming profitable ahead of its planned IPO. This article is an excerpt from Latest Technology News | New York

Apple reveals major changes to iOS 27 — including new ‘Liquid Glass’ design and helpful photo editing feature 2026-06-09 at 03:10 By Marissa Matozzo Talk about a needed glow-up. This article is an excerpt from Latest Technology News | New York Post View Original Source