Confused Deputy Flaws Let Low-Level Users Hijack Azure and Google Cloud
Two confused deputy cloud flaws in Azure and Google Cloud let low-privilege users grab full admin control, and one is still unpatched.
Secure.com News
Stay updated with the latest cybersecurity news, threat intelligence, and industry updates from secure.com.
Browse by Category
5 AI Coding Tools Invented the Same 127 Fake Packages. Dozens Are Still Up for Grabs
New research shows slopsquatting is still a live risk, because five different AI models keep inventing the exact same fake software packages.
Researchers Walk an AI Agent Out of Its Sandbox and Onto the Host Mac
A new AI agent sandbox escape shows how one kernel bug plus a shared host mount can hand an agent the keys to your whole machine.
Just Opening the Email Was Enough: Russian Hackers Turned a Zimbra Zero-Day Into a Silent Mail Thief
A Zimbra zero-day gave Russian state hackers a way into government mailboxes without a single click from the victim.
A Nine Year Old Linux Bug Just Handed Ordinary Users The Keys To Root
The RefluXFS Linux kernel flaw sat quietly in XFS since 2017, and it hands ordinary users full root.
Operation Olympus Blade: Inside the Kratos Takedown
The Kratos phishing takedown pulled 200 servers offline, but the 1,800 criminals who rented the kit are still out there shopping for a replacement.
Researchers Trace Malware Campaign to North Korean Hiring Scheme
North Korean operators are running a ClickFake Interview campaign that turns a fake camera error into a full system takeover.
The Machines Broke Out of the Lab, and Nobody Told Hugging Face
The first confirmed AI agent cyberattack on a major platform did not come from a criminal gang. It came from a lab running its own safety...
Windows Patches Got Stuck. The Culprit Was Microsoft Itself.
A WSUS sync failure stalled Windows patches right at Patch Tuesday, and Microsoft finally has a manual fix for it.
Linux Just Fixed 400 Bugs in a Day. Now Comes the Hard Part.
A wave of Linux kernel vulnerabilities got patched in one day, and AI helped find them faster than teams can install them.
How an LLM Beat Ivanti’s Own Scanners to a Critical Bug
An Ivanti LLM vulnerability discovery turned up a perfect 10 flaw in Sentry, and attackers pounced within a day.
Inc Ransomware Breaks Into SonicWall VPN Gateways Using Two Zero Days
Attackers used SonicWall SMA zero days to break into VPN gateways, steal logins, and prep ransomware