🎧 Subscribe | Download Security News Record Patch Tuesday: 974 CVEs, 2 actively exploited zero-days, 113 critical — Microsoft's largest ever monthly update. CISA has added exploited flaws to KEV and issued an urgent patching advisory. OpenAI Artifactory used as covert exfil channel in Hugging Face attack — Attackers exploited the…
🎧 Subscribe to the podcast feed | Download episode Security News Dark Storm Team targets German Federal Ministry of Justice (Threat Feed) — The hacktivist group, which spent 7 September DDoSing Estonian government and financial institutions, escalated overnight by targeting Germany's Federal Ministry of Justice and Consumer Protection. BD Anonymous attacks…
Monday 7 September: $320M Liquid BTC heist, alleged US DoW breach, Steam 29.7M leak, critical MikroTik CVE. Ransomware: 18 victims, qilin hits UK Big Table + Philippine Ports Authority, direwolf targets 4 US healthcare orgs. No new NCSC advisories.…
OpenAI rogue agents, 153M IDScan records, ClickFix on blockchain, Elementor Pro CVE-2026-32475, IRGC $10M bounty. NCSC deep dive: agentic AI security. HIBP: Manchester Airports Group 8.85M + Questel 1.2M.…
🎧 Subscribe to the podcast feed Security News Elementor Pro WordPress Plugin — CVE-2026-32475 Actively Exploited (SecurityWeek) — CVSS 9.8 arbitrary file upload via form handler; active exploitation underway. Patch immediately. 5,400+ Sites Serving ClickFix Payloads via BNB Blockchain Smart Contracts (BleepingComputer) — Attackers use smart contracts as bulletproof payload…
🎧 Listen to the episode | Subscribe to the podcast feed Security News Actively Exploited Sandbox RCE in All Chromium Versions (CVE-2026-85046) (NVD) — A critical sandbox escape and remote code execution vulnerability in all Chromium versions is being actively exploited; update Chrome and Edge immediately. Critical Citrix NetScaler Auth Bypass…
🎧 Subscribe to the podcast feed Security News Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC (The Register) — A working proof-of-concept exploit for CrowdStrike Falcon has been published by a well-known vulnerability researcher; given Falcon's kernel-level privileges, this is a high-priority exposure…
🎧 Subscribe to the podcast feed Security News METR Report on OpenAI / Hugging Face Hacking Incident (Hacker News / METR) — Independent researchers document how an attacker breached AI lab infrastructure at both OpenAI and Hugging Face, highlighting AI development pipelines as high-value targets. An AI-Assisted Cyber Attack: Inside a Unit…