cyberintel.kalymoon.com · 33770 articles · updated every 4 hours · grows forever
A newly disclosed Linux kernel vulnerability combining a Copy-on-Write (COW) page-cache corruption flaw with the net/sched subsystem’s act_pedit component is enabling unprivileged local attackers to e…
A high-severity vulnerability in the Amazon Q Developer Extension for Visual Studio Code (VS Code), Amazon’s AI-powered coding assistant. Tracked as CVE-2026-12957 and CVE-2026-12958 and disclosed by …
A new Linux kernel local privilege escalation vulnerability, dubbed “DirtyClone” (CVE-2026-43503), that allows unprivileged local users to gain full root access by manipulating cloned network packets …
Enterprises that have turned to AI in order to boost their security defenses may have to reconsider their approach. Malware containing code that commands LLM-assisted products to abort their analysis …
A Chinese-speaking advanced persistent threat (APT) actor has been linked to a new custom backdoor called TinyRCT as part of cyber attacks aimed at government entities and critical infrastructure in S…
A newly discovered cyber attack campaign has been observed delivering a previously undocumented malware family called SharkLoader that acts as a loader for deploying Cobalt Strike Beacon on compromise…
The FBI and CISA have updated their March warning about Russian intelligence phishing Signal accounts, and the operators have added a step: they now coax targets into handing over their Signal Backup …
Threat actors are creating OpenAI tenants that impersonate legitimate companies and inviting employees to join them, in what appears to be a ploy to trick targets into submitting sensitive company inf…
Polymarket says it will fully reimburse customers who lost an estimated $3 million after hackers injected a malicious script into the platform's frontend following a breach at a third-party vendor. [.…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is giving federal agencies until Sunday to patch a vulnerability in Cisco Unified Communications Manager Server that is being actively …
How Quantum Computing Can Solve Energy And Climate Challenges Forbes
Why Investors Are Finally Separating Quantum Computing Winners From Losers 24/7 Wall St.
Thales warns AI ecosystems could become new insider threat without stronger governance Biometric Update
Five Eyes Cyber Security Agencies Statement National Security Agency (NSA) (.gov)
The 10 Hottest Cybersecurity Startups Of 2026 (So Far) crn.com
A.I. Writes Buggy Code. A Silicon Valley Start-Up Wants to Fix It. The New York Times
⚡ Weekly Recap: Instagram Account Hacks, Android Zero-Day, GitHub Worm and More The Hacker News
We know that ICE wants to deploy eyeglasses with facial recognition that can identify people in real time. Turns out Meta is prototyping the feature with a Pentagon supplier. (Alternate news story.)
They could have — and should have — anticipated great curiosity about this particular patient’s medical records. Did they control access well enough? Emily Stevens reports: The medical records of a yo…
Operation Endgame takes down Amadey and StealC servers, macOS.Gaslight floods AI triage with fake errors, and attackers exploit Cisco flaws for root access.
Amadey, StealC malware operations disrupted in Operation Endgame action A coordinated law enforcement operation involving Europol, Microsoft, ESET, Bitdefender, and partners has dismantled the crimina…
A vulnerability was found in sahlberg libnfs up to 6.0.2 . It has been rated as problematic . Affected by this vulnerability is an unknown functionality in the library lib/socket.c of the component NF…
A vulnerability labeled as problematic has been found in jupyter up to 7.17.0 . This vulnerability affects unknown code. Executing a manipulation can lead to cross site scripting. This vulnerability i…
A vulnerability marked as problematic has been reported in Johnson & Johnson Campus Recruiting . This issue affects some unknown processing. The manipulation leads to client-side enforcement of server…