Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Friday, July 31, 2026

HIGHGoogle Fixes 1,442 Chrome Flaws, Many with AI Assistancechrome · vulnerability · ai · browser-securityHIGH84 Flaws Disclosed in 4G and 5G Core Networks, Including Session Hijacking5g · 4g · vulnerability · telecomHIGHDevice Code Phishing Emerges as Fastest-Growing Threat of 2026phishing · oauth · identity-theft · access-tokensCRITICALAnthropic's Claude AI Breached Three Organizations During Security Testsai · breach · red-teaming · malware

Thursday, July 30, 2026

CRITICALJetBrains Warns of Critical TeamCity RCE Flawjetbrains · teamcity · rce · vulnerabilityCRITICALCl0p Ransomware Group Exploiting PTC Windchill RCE Vulnerabilitycl0p · ransomware · rce · vulnerability

Saturday, July 25, 2026

HIGHMalvertising Campaign Builds Malware in Browser Memory Using JavaScriptmalvertising · malware · javascriptCRITICALFastjson 1.x RCE Vulnerability Actively Exploited, No Patch Availablecve · rce · java · fastjsonHIGHGitLab RCE Exploit Published for Unpatched Serversgitlab · rce · exploit · vulnerabilityCRITICALCl0p Affiliates Exploit PTC Windchill and FlexPLM for Data Extortioncl0p · ransomware · data-breach · exploit

Friday, July 24, 2026

HIGHHermes AI Agent Used to Automate Attack on Thai Finance Ministryai-security · threat-actor · automationHIGHHackers Hijack Hotel Wi-Fi DNS to Steal Microsoft 365 Accountsphishing · dns-hijacking · microsoft-365CRITICALCertighost Exploit Allows Low-Privileged AD Users to Impersonate Domain Controllersactive-directory · privilege-escalation · exploitMEDIUMAI Coding Agents Vulnerable to 'Slopsquatting' and 'HalluSquatting' Attacksai-security · supply-chain · malwareHIGHDefault Azure Automation Setting Enables Cross-Tenant Identity Takeoverazure · cloud-security · vulnerabilityHIGHChatGPT AgentForger Flaw Could Deploy Rogue AI Agents via Phishingai-security · phishing · vulnerabilityCRITICALBing Images Flaws Allowed RCE as SYSTEM on Microsoft Serversrce · microsoft · vulnerability · svgHIGHKimi K3 AI Agents Discover Redis Zero-Days and Build RCE Exploitredis · zero-day · rce · ai-securityHIGHFake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacksmalware · threat-actor · phishing

Thursday, July 23, 2026

CRITICALRussian Espionage Group Exploits Zimbra Zero-Day to Steal Mail and 2FA Codeszero-day · zimbra · espionage · threat-actorHIGHClaude Cowork Flaw Allows AI Agent to Escape VM and Access Mac Filesai-security · sandbox-escape · vulnerabilityHIGHChaos Ransomware Uses msaRAT to Route C2 Traffic Through Headless Browsersransomware · malware · c2 · threat-actorHIGHTwin Path Traversal CVEs in Kubernetes Storage CSI Driverskubernetes · cve · cloud-security · vulnerabilityHIGHAttackers Weaponize GitHub Actions Runners to Target cPanel and WHM Serverssupply-chain · github · cpanel · threat-actorCRITICALNine-Year-Old RefluXFS Linux Flaw Gives Local Users Root on Default RHEL Installslinux · privilege-escalation · cve · exploit