Curated intelligence at the intersection of offensive security and AI — the latest items, newest first. See Top Picks for the highest-impact stories.

Thursday, August 27, 2026

HIGHHoneypots Uncover Active Campaigns Targeting AI Infrastructureai-security · honeypot · rce · prompt-injectionHIGHManchester Airports Group Discloses Data Breach Affecting Travelersdata-breach · travel · wi-fi · customer-dataCRITICALNext.js Patches Critical AVIF and Windows Flaws Enabling Unauthenticated RCEnextjs · rce · cve · web-frameworkHIGHAmazon Kiro Prompt Injection Can Exfiltrate Sensitive Dataai-security · prompt-injection · data-exfiltration · ideHIGHAlleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attackscybercrime · supply-chain · arrests · threat-actor

Wednesday, August 26, 2026

HIGHCISA Red Team Compromised Two Critical Infrastructure Orgs; One Detected Nothingred-team · critical-infrastructure · detection · cisa

Friday, August 21, 2026

HIGHTrojanized npm Packages Deliver AI-Powered RedC2 Linux Backdoornpm · supply-chain · linux · malwareHIGHThousands of Leaked AWS Keys Remain Active, Granting Full Account Controlaws · cloud-security · data-breach · credentialsCRITICALMicrosoft Defender Driver Can Be Abused to Delete Security Softwarewindows · privilege-escalation · edr-bypass · microsoft-defenderHIGHAndroid Car Head Units Infected with Proxy Botnet Malwareandroid · malware · botnet · automotiveCRITICALGitLab Code Injection Flaw (CVE-2026-19478) Under Active Exploitationgitlab · code-injection · rce · vulnerabilityCRITICALMicrosoft Patches Critical Entra ID Flaw (CVSS 10.0)microsoft · entra-id · rce · vulnerability

Thursday, August 20, 2026

CRITICALRust Crates Compromised in Supply Chain Attack, Delivering Malwaresupply-chain · rust · malware · developer-toolsHIGHUnprecedented Number of Apple Users Receive Spyware Alertsapple · spyware · nation-state · mobile-securityCRITICALAI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructureai · critical-infrastructure · ics · exploit-developmentHIGHCryptographic Context Injection Attack Can Steal Grok Chat Dataai · chatbot · data-exfiltration · vulnerabilityHIGHIsolated-vm Flaw Allows JavaScript Sandbox Escape to Hostjavascript · sandbox-escape · vulnerability · open-sourceCRITICALCritical NetScaler Flaw Allows Authentication Bypasscitrix · netscaler · authentication-bypass · vulnerabilityCRITICALZimbra SNMP Flaw Actively Exploited for Remote Code Executionzimbra · rce · vulnerability · exploitationHIGHZombie Card Attack Revives Expired Visa Cards for Contactless Paymentspayment-systems · nfc · visa · contactless-paymentsHIGHCDN Tsunami Attack Exploits HTTP/3 Translation for DoS Amplificationdos · cdn · http3 · amplificationCRITICALNASA AIT-GUI Flaws Allow Unauthenticated Spacecraft Command Executionnasa · spacecraft · rce · critical-infrastructureHIGHMalicious Firefox Extensions Steal Web3 Wallet Secretscryptocurrency · malware · browser-extension · web3

Wednesday, August 19, 2026

MEDIUMOpenAI Pauses Frontier RL Training to Enhance AI Security Defensesai · openai · security-controls · responsible-aiCRITICALCISA Warns of Actively Exploited macOS, SharePoint, vCenter, and Microsoft IKE Flawscisa · kev · vulnerabilities · exploitation