Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Friday, October 16, 2026

HIGHBurger King Japan Suffers Data Breach Exposing 11 Million Customer Recordsdata-breach · burger-king · japan · customer-dataHIGHBAE Systems Cyberattack Disrupts US Federal Court Operationssupply-chain · government · cyberattack · bae-systemsCRITICALCERT-In Warns AI Agents Accessed Sensitive Data in Indian Organizations During Testingai-security · data-breach · cert-in · ai-agents

Thursday, October 15, 2026

HIGHAI-Powered Espionage Campaign Targets Government Linux Infrastructureai-threats · espionage · linux · governmentCRITICALCritical PwnEscape Linux Kernel Vulnerability Allows Guest VMs to Read Host Memorylinux-kernel · vm-escape · vulnerability · cloud-securityMEDIUMHackers Hijack D-Link, Ubiquiti Devices for Proxyjacking Campaigniot-security · proxyjacking · botnet · d-linkHIGHFake Arch Linux Packages Push Malware with Root Privilegeslinux · supply-chain · malware · arch-linuxHIGHSilent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacksapt · winrar · reverse-shell · governmentHIGHNGINX Fixes Five Flaws, Including Potential RCE and TLS Bypassnginx · vulnerability · rce · tlsCRITICALNext.js Ships Out-of-Band Patch for Critical RCE Flawsnextjs · rce · vulnerability · web-development

Sunday, October 11, 2026

CRITICALNippon Columbia Data Breach Exposes 8.6 Million Karaoke Fan Recordsdata-breach · malware · supply-chain · japanHIGHP7 DarkSword iOS Exploit Kit Adds Crypto Wallet Theft and Remote Commandsios · exploit-kit · malware · cryptocurrency

Saturday, October 10, 2026

HIGHCyber Executive Arrested in Connection with ShinyHunters Hacking Groupcybercrime · shinyhunters · fbi · arrestCRITICALChinese Hacker Uses ARTEX AI and Claude Agents in South Korean Bank Attacksai · apt · cyberattack · south-koreaHIGHThe Third-Party Agent Problem: Invisible AI Agents Pose Security Risksai-security · third-party · identity · shadow-itHIGHAnthropic Cuts Internet Access for Internal AI Tests After Claude Exploits Injection Flawsai-security · llm · vulnerability · anthropic

Friday, October 9, 2026

CRITICALCredential-Stealing GitHub Actions Workflows Planted in Thousands of Repositoriessupply-chain · github · credential-theft · open-sourceHIGHUnpatched AhsayCBS Flaws Exploited to Deploy Webshells and Crypto Minersvulnerability · exploit · webshell · cryptojackingHIGHGermany Arrests Alleged Core Qilin Ransomware Member After Extraditionransomware · cybercrime · arrest · qilinCRITICALWorking Exploit Published for Pre-Auth AnyDesk Linux Root RCE Flawrce · exploit · linux · anydeskCRITICALMax Severity SonicWall SMA1000 Flaw Actively Exploited in Attacksvulnerability · exploit · sonicwall · vpnHIGHGoBalance Flaw Allows Hijacking of .onion Addresses by Recovering Tor Keystor · dark-web · vulnerability · hijackingHIGHThree Teams Achieve Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Ownzero-day · pwn2own · mobile-security · google-pixelHIGHFBI Disrupts Chinese Hacking Tools Used to Breach Critical Infrastructureapt · china · critical-infrastructure · fbi

Thursday, October 8, 2026

CRITICAL'AgentCorruption' Vulnerability in AWS Bedrock AgentCore Puts Environments at Riskaws · ai-security · cloud-security · vulnerability