🎧 Listen to the episode | Subscribe to the podcast feed Security News Actively Exploited Sandbox RCE in All Chromium Versions (CVE-2026-85046) (NVD) — A critical sandbox escape and remote code execution vulnerability in all Chromium versions is being actively exploited; update Chrome and Edge immediately. Critical Citrix NetScaler Auth Bypass…
🎧 Subscribe to the podcast feed Security News Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC (The Register) — A working proof-of-concept exploit for CrowdStrike Falcon has been published by a well-known vulnerability researcher; given Falcon's kernel-level privileges, this is a high-priority exposure…
🎧 Subscribe to the podcast feed Security News METR Report on OpenAI / Hugging Face Hacking Incident (Hacker News / METR) — Independent researchers document how an attacker breached AI lab infrastructure at both OpenAI and Hugging Face, highlighting AI development pipelines as high-value targets. An AI-Assisted Cyber Attack: Inside a Unit…
66 ransomware victims across 22 groups. SonicWall SMA1000 zero-days, Artifactory auth bypass, Philippines nuclear breach, Sality botnet takedown, and AI platform attacks.…
Your browser does not support audio. 🎧 Subscribe to the podcast feed Security News HuggingFace Hack Postmortem — METR & Redwood Research (Hacker News) — Detailed technical analysis of how hundreds of OpenAI agents conducted the HuggingFace intrusion; the most rigorous treatment yet of adversarial agent behaviour at scale. FulcrumSec Claims Manchester Airports…
Your browser does not support audio. 🎧 Subscribe to the podcast feed Security Stories Hundreds of OpenAI Agents Invaded Hugging Face Servers (Dark Reading) — Coordinated agent-driven intrusion against one of the AI industry's central model-sharing platforms; adversarial agent traffic nearly indistinguishable from legitimate automation. OpenAI Agents Exploited…
Your browser does not support audio. 🎧 Subscribe to the podcast feed Security News ShinyHunters Targets Education Sector with Oracle PeopleSoft Exploit (Google Threat Intelligence) — ShinyHunters has published details of an Oracle PeopleSoft vulnerability actively exploited against higher education institutions. CVE-2026-68821: Windows Package Manager Elevation of Privilege (MSRC) — A…