https://pulse.adyog.com/insights/devalue-buffer-shared-memory-leak-ssr WebPulse en 2026-10-01T21:10:47+00:00 A devalue bug can copy other users' request data into public web pages https://pulse.adyog.com/insights/kiteworks-epg-cve-2026-54154-max-severity WebPulse en 2026-10-01T20:10:40+00:00 Kiteworks patches a max-severity flaw in its Email Protection Gateway https://pulse.adyog.com/insights/cloudsyncd-macos-fake-zoom-installer WebPulse en 2026-10-01T19:20:11+00:00 Jamf found a fake Zoom installer for Mac that uses the user's password as a key https://pulse.adyog.com/insights/verizon-bis-2026-breach-cost-claims-data WebPulse en 2026-10-01T16:17:18+00:00 Verizon's claims data: the typical paid cyber claim is $83,000, with a long tail https://pulse.adyog.com/insights/acer-nitrosense-cve-2026-50610-system-access WebPulse en 2026-10-01T16:14:02+00:00 Acer NitroSense component lets a standard Windows user become SYSTEM https://pulse.adyog.com/insights/microsoft-rust-tier-1-shared-compiler-backend WebPulse en 2026-10-01T15:10:25+00:00 Microsoft makes Rust a Tier-1 internal language, sharing a Windows C++ back end https://pulse.adyog.com/insights/cheap-ai-checkers-agent-oversight-cost WebPulse en 2026-10-01T13:14:40+00:00 Cheap AI checkers could make reviewing every agent action affordable https://pulse.adyog.com/insights/openai-distillation-model-decrypted-own-reasoning WebPulse en 2026-10-01T12:20:08+00:00 Attackers asked OpenAI's model to unlock its own protected reasoning https://pulse.adyog.com/insights/cloudflare-agentic-web-blocking-is-pricing WebPulse en 2026-10-01T12:13:06+00:00 Cloudflare: over half of traffic is not human, so blocking is a pricing choice https://pulse.adyog.com/insights/claude-opus-5-5-em-dash-ai-writing-tells WebPulse en 2026-10-01T11:12:55+00:00 Claude Opus 5.5 dropped the em dash, but 2,548 AI writing tells remain https://pulse.adyog.com/insights/sc-wordpress-malware-self-healing-mesh WebPulse en 2026-10-01T10:10:19+00:00 Sucuri: SC WordPress malware hides in at least 8 places and rebuilds itself https://pulse.adyog.com/insights/mediaflow-proxy-ssrf-cve-2026-100391 WebPulse en 2026-10-01T10:09:16+00:00 MediaFlow Proxy bug lets outsiders make the server fetch internal pages https://pulse.adyog.com/insights/openai-dots-agents-permissions WebPulse en 2026-10-01T09:26:05+00:00 OpenAI's Dots agents reach more than 4,000 apps, so permissions matter most https://pulse.adyog.com/insights/bitget-zero-day-security-appliances-387m WebPulse en 2026-10-01T09:21:48+00:00 Bitget says zero-day attacks on two security appliances led to $387.5M theft https://pulse.adyog.com/insights/angular-ssr-numeric-matrix-parameter-dos WebPulse en 2026-10-01T09:18:18+00:00 Crafted URLs can crash Angular server rendering on Node.js, advisory says https://pulse.adyog.com/insights/gemini-4-argon-ties-astra-fewer-guesses WebPulse en 2026-10-01T08:09:04+00:00 Google's Gemini 4 Argon ties GPT-6 Astra on score but guesses far less often https://pulse.adyog.com/insights/snyk-evo-ads-mcp-governance-agent-tools WebPulse en 2026-10-01T07:10:13+00:00 Developers add AI agent tools in seconds, often with no security review https://pulse.adyog.com/insights/astro-netlify-image-allowlist-ssrf WebPulse en 2026-10-01T06:08:56+00:00 Astro's Netlify adapter let image allowlists be bypassed https://pulse.adyog.com/insights/nextjs-september-2026-cache-flaws WebPulse en 2026-10-01T05:16:57+00:00 Next.js fixes seven flaws; four involve caches serving the wrong content https://pulse.adyog.com/insights/astro-node-adapter-host-header-crash WebPulse en 2026-10-01T05:15:23+00:00 One bad header can crash Astro servers that use a specific option https://pulse.adyog.com/insights/sql-copilot-cve-2026-65669-sysadmin WebPulse en 2026-10-01T04:12:45+00:00 Researcher: Copilot in SSMS let a db_owner become a sysadmin https://pulse.adyog.com/insights/ai-safeguards-flag-routine-developer-work WebPulse en 2026-10-01T03:14:21+00:00 Developers say AI safeguards slow routine aerospace, robotics and security work https://pulse.adyog.com/insights/dmdc-military-records-breach-file-sharing WebPulse en 2026-10-01T02:12:52+00:00 A file-sharing flaw put unencrypted military records of 3 million people at risk https://pulse.adyog.com/insights/gpt6-astra-aisi-unauthorized-supply-chain-attacks WebPulse en 2026-10-01T00:25:17+00:00 Safeguards off, GPT-6 Astra ran simulated supply-chain attacks in 29% of runs https://pulse.adyog.com/insights/github-543699-live-credentials-revocation WebPulse en 2026-10-01T00:24:20+00:00 Scan of public GitHub code finds 543,699 leaked credentials that still work https://pulse.adyog.com/insights/cloudflare-monetization-gateway-http-402-agents WebPulse en 2026-10-01T00:23:05+00:00 Cloudflare tests a paywall for AI agents that charges per request https://pulse.adyog.com/insights/wiz-helm-chart-supply-chain-research WebPulse en 2026-09-30T23:09:49+00:00 Wiz found confirmed supply chain risks in 61 of 814 Helm chart source projects https://pulse.adyog.com/insights/deepfake-abuse-sites-mainstream-infrastructure WebPulse en 2026-09-30T22:09:25+00:00 Study: 88 deepfake abuse sites run on mainstream web infrastructure https://pulse.adyog.com/insights/gtig-ai-found-vulnerabilities-rce-2026 WebPulse en 2026-09-30T21:12:43+00:00 Google: half of likely AI-found flaws let attackers run code remotely https://pulse.adyog.com/insights/cisco-sd-wan-manager-cve-2026-76504-bypass WebPulse en 2026-09-30T21:11:51+00:00 Cisco SD-WAN Manager flaw lets attackers skip login; Cisco says it is exploited https://pulse.adyog.com/insights/browser-attacks-past-login-push-security-2026 WebPulse en 2026-09-30T21:10:30+00:00 Push Security: attackers are moving into the browser, past login and email https://pulse.adyog.com/insights/zimbra-cve-2026-73570-probed-before-disclosure WebPulse en 2026-09-30T20:13:34+00:00 Attackers probed a Zimbra mail flaw before it was public, Microsoft reports https://pulse.adyog.com/insights/entra-id-csp-script-injection-block WebPulse en 2026-09-30T20:12:17+00:00 Entra ID browser sign-ins will block non-Microsoft scripts from mid-October https://pulse.adyog.com/insights/watchguard-fireware-cve-2026-86131-vpn-rce WebPulse en 2026-09-30T19:13:30+00:00 WatchGuard firewall flaw lets a rogue VPN server run commands as root https://pulse.adyog.com/insights/ai-agents-probed-public-sites-routine-tasks WebPulse en 2026-09-30T19:12:17+00:00 AI agents on routine data tasks probed three public sites for flaws https://pulse.adyog.com/insights/teamviewer-15-82-five-flaws-session-bypass WebPulse en 2026-09-30T18:10:52+00:00 TeamViewer fixes five flaws; one lets authenticated attackers bypass permissions https://pulse.adyog.com/insights/chrome-154-firefox-157-patch-100-flaws WebPulse en 2026-09-30T18:10:18+00:00 Chrome, Firefox patch over 100 flaws; neither vendor mentions exploitation https://pulse.adyog.com/insights/waterisac-exposed-plcs-among-easiest-way-in WebPulse en 2026-09-30T17:11:05+00:00 Internet-exposed controllers at water utilities are among the easiest ways in https://pulse.adyog.com/insights/openinfra-artifactory-breach-found-sept-15 WebPulse en 2026-09-30T17:10:08+00:00 OpenInfra Europe's package server was hit Aug 31 and found Sept 15 https://pulse.adyog.com/insights/uat-11587-antino-spoofed-email-dmarc-none WebPulse en 2026-09-30T16:13:56+00:00 A spoofed email failed DMARC and still reached the inbox in an Asia spy campaign https://pulse.adyog.com/insights/mythos-rejetto-hfs-weak-randomness-admin-access WebPulse en 2026-09-30T16:10:53+00:00 Horizon3 says AI proved a kind of flaw its team used to abandon https://pulse.adyog.com/insights/star-blizzard-redflick-one-action-backdoor WebPulse en 2026-09-30T15:15:55+00:00 Star Blizzard's backdoor needs one click after the reply, Microsoft says https://pulse.adyog.com/insights/property-based-testing-ai-agents-consistency WebPulse en 2026-09-30T15:10:50+00:00 One way to test AI without an answer key: check that meaning-preserving changes change nothing https://pulse.adyog.com/insights/atns-ransomware-malware-air-traffic-ot-network WebPulse en 2026-09-30T14:15:41+00:00 South Africa's air traffic provider found ransomware-linked malware https://pulse.adyog.com/insights/openssl-14-fixes-small-inputs-large-resource-use WebPulse en 2026-09-30T13:15:27+00:00 Several of OpenSSL's 14 fixes let a peer force outsized memory or CPU use https://pulse.adyog.com/insights/ipsec-quantum-downgrade-cloudflare WebPulse en 2026-09-30T13:12:14+00:00 Cloudflare: IPsec flaw could let a future quantum attacker sidestep upgrades https://pulse.adyog.com/insights/owasp-noir-endpoint-inventory-shadow-apis WebPulse en 2026-09-30T12:13:28+00:00 Free OWASP tool lists routes in code, including undocumented ones https://pulse.adyog.com/insights/china-model-hubs-modelscope-moark-hf WebPulse en 2026-09-30T12:12:29+00:00 China's 2023 Hugging Face block opened a market for home-grown AI hubs https://pulse.adyog.com/insights/eu-cra-container-kubernetes-five-year-duty WebPulse en 2026-09-30T11:09:38+00:00 EU cyber law requires five years of updates for covered container products https://pulse.adyog.com/insights/wsl-containers-ga-windows-admin-controls WebPulse en 2026-09-30T10:12:20+00:00 Microsoft launches Linux containers on Windows with admin controls alongside https://pulse.adyog.com/insights/detectify-open-critical-flaws-older-than-90-days WebPulse en 2026-09-30T10:10:57+00:00 At Detectify customers, most open serious flaws are over three months old https://pulse.adyog.com/insights/cisco-survey-security-controls-six-months WebPulse en 2026-09-30T09:09:57+00:00 Cisco survey: 21% of firms can add a control within 6 months of approval https://pulse.adyog.com/insights/pyjwt-nested-header-recursionerror-500 WebPulse en 2026-09-30T07:14:57+00:00 PyJWT flaw lets one crafted token turn logins into server errors https://pulse.adyog.com/insights/openclaw-enterprise-agent-control-plane WebPulse en 2026-09-30T07:09:50+00:00 OpenClaw says IT teams block AI agents; it launches a free control plane https://pulse.adyog.com/insights/copilot-cowork-poisoned-skill-file-exfiltration WebPulse en 2026-09-30T06:11:07+00:00 Researchers got Copilot Cowork to leak files using a poisoned skill file https://pulse.adyog.com/insights/openbao-vault-four-flaw-rce-chain WebPulse en 2026-09-30T04:11:50+00:00 Four OpenBao flaws chain into code execution; Vault fix still awaited https://pulse.adyog.com/insights/anthropic-ai-rebuilds-malware-when-detected WebPulse en 2026-09-30T04:10:42+00:00 Anthropic: one actor built AI agents to rebuild malware whenever it is flagged https://pulse.adyog.com/insights/storm-3068-azure-devops-pipeline-kubeconfig WebPulse en 2026-09-30T03:10:34+00:00 Attackers built a malicious pipeline to collect Kubernetes keys, Microsoft says https://pulse.adyog.com/insights/ai-model-price-cuts-failed-max-thinking-run WebPulse en 2026-09-30T02:10:00+00:00 New Claude and GPT models launched cheaper, yet a failed request cost $2.56 https://pulse.adyog.com/insights/upm-package-manager-secure-defaults WebPulse en 2026-09-30T01:29:37+00:00 upm package manager skips install scripts and delays new releases by default https://pulse.adyog.com/insights/toptech-tms7-tophat-ten-flaws-release-7-8 WebPulse en 2026-09-30T01:27:40+00:00 Toptech says version 7.8 fixes ten flaws in TMS7 and TopHAT https://pulse.adyog.com/insights/shopify-drops-react-native-agents-cost WebPulse en 2026-09-30T01:23:34+00:00 Shopify drops React Native, saying AI agents cut the cost of native apps https://pulse.adyog.com/insights/mikrotik-routeros-preauth-web-flaw-cisa WebPulse en 2026-09-30T01:19:10+00:00 MikroTik RouterOS flaw lets attackers run code as root with one request https://pulse.adyog.com/insights/lantronix-g520-update-path-root-flaws WebPulse en 2026-09-30T01:17:06+00:00 Two flaws in Lantronix gateways let attackers run root code through updates https://pulse.adyog.com/insights/baicells-nova-430h-no-fix-cve-2026-96274 WebPulse en 2026-09-30T01:13:06+00:00 CISA lists no fix for a Baicells cell radio flaw; vendor did not reply to CISA https://pulse.adyog.com/insights/pixelleak-ai-agents-public-github-screenshots WebPulse en 2026-09-30T00:09:52+00:00 Glow Labs says AI agents left 13,000+ internal images on public GitHub https://pulse.adyog.com/insights/spectre-btr-jit-linux-memory-leak WebPulse en 2026-09-29T23:19:55+00:00 New Spectre flaw leaks Linux memory; CPU makers say software must fix it https://pulse.adyog.com/insights/darpa-xint-ai-military-messaging-apps WebPulse en 2026-09-29T23:16:06+00:00 DARPA selects Xint to research AI security checks for military messaging apps https://pulse.adyog.com/insights/star-blizzard-redflick-single-interaction WebPulse en 2026-09-29T22:14:57+00:00 Microsoft says Star Blizzard's RedFlick needs a single user interaction https://pulse.adyog.com/insights/divd-ai-agent-breach-messy-trail WebPulse en 2026-09-29T22:12:05+00:00 DIVD says a flaw let an intruder in, then an AI agent ran the attack https://pulse.adyog.com/insights/phantomsub-npm-baileys-whatsapp-follow-campaign WebPulse en 2026-09-29T21:15:55+00:00 OX Security: 101 npm packages make developers' WhatsApp accounts follow channels https://pulse.adyog.com/insights/meta-muse-agent-shared-home-address WebPulse en 2026-09-29T21:12:56+00:00 Meta's Muse AI agent gave out a user's home address, he says https://pulse.adyog.com/insights/aws-agentcore-sdk-package-name-flaws WebPulse en 2026-09-29T21:10:04+00:00 AgentCore SDK flaw: a package name could run commands, and the first fix failed