inionline.net https://validator.w3.org/feed/docs/rss2.html Long-running Data Theft Campaign Targeting Salesforce, ServiceNow Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor Walmart’s "Trusted Agent" Approach to Purple Teaming 737 Chrome VPN Extensions Caught Routing Traffic Through Proxies. Check If You Have One Ransomware Hits Colombian Justice Ministry Days Before Presidential Transition Walmart Leaders Transform Security Operations Without Going Bananas OpenAI, Anthropic, Google API Flaw Let Weaker AI Models Decode Stronger Models’ Reasoning Enterprise Defenses Recovered at the Edge and Collapsed Inside Adobe Patches Three CVSS 10.0 ColdFusion and Campaign Classic Flaws Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations SAP Commerce Cloud Flaw Could Let Unauthenticated Attackers Execute Arbitrary Code ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access Cisco ASA and FTD Flaw Exploited in the Wild Can Trigger Remote DoS Microsoft’s Patch Tuesday Deluge Continues With August Updates Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFA Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee’s Client Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Exploit Development A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine Rockwell Automation/Allen-Bradley MicroLogix PLCs Attack BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins ‘GhostJacking’ Exposes Identity Governance Gaps in AI Agents Multistate Water System Attacks Widen, Iran Suspected Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius The Patch Gap: Why Defenders Need to Think in Chains, Not Checklists Coruna, DarkSword iOS Exploits Proliferate Globally Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers China-Linked Hackers Deploy New StormEncryptor Ransomware, Likely via N-central Flaw Sherlock Holmes was the “OG” Social Engineer ⚡ Weekly Recap: AI Goes Rogue, Metabase 0-Day, MCP Supply-Chain Attacks, and Router Backdoors Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development New Passkey Attacks Can Recover Synced Private Keys or Bypass Phishing-Resistant MFA Shipping 10–50× More Code? Watch This Webinar on Securing AI-Speed Development TrueConf Server Flaws Exploited to Replace Client Installers with PhantomCore Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys, and Credentials OpenAI’s Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause New CSS Attacks Can Break Webmail Defenses to Steal Passwords and Tokens Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication Outdated Cybercrime Laws Put Security Researchers at Risk