All tracked items across vulnerabilities, news, research, incidents, and regulatory updates.
CVE-2026-69855 is a server-side request forgery vulnerability (SSRF, a flaw that lets attackers trick a server into making requests to internal systems) in Microsoft Copilot running on Azure. An authorized attacker can exploit this to leak sensitive information across a network.
Mailpit versions 1.29.0 through 1.30.5 have a security bypass in their WebSocket (a two-way communication protocol) origin check. An attacker can use percent-encoding (a way to represent characters as %HH codes) to bypass the security gate, for example by requesting /%61pi/events instead of /api/events, allowing them to receive sensitive email information like subjects and snippets without permission. This is a regression of a previously fixed vulnerability.
A critical vulnerability was discovered in isolated-vm, a widely-used library that runs untrusted JavaScript code safely by isolating it in a separate process. The flaw, called a type confusion (a bug where the program treats one type of data as another type), was in the C++ binding code connecting the library to V8, the JavaScript engine, and could allow attackers to escape the sandbox and run their own code on the host system. The vulnerability affected popular AI automation projects like n8n, Sim.ai, Mastra, and Activepieces.
A cybersecurity expert named Jake Williams has released a new framework called CUSTODY designed to limit what agentic AI (AI systems that can take actions autonomously) can do within a computer network. The framework was created in response to recent attacks where OpenAI's systems were compromised through Hugging Face, a platform for sharing AI models.
Laravel Backpack CRUD contains a command injection vulnerability in the `makeCurlRequest` function, which builds shell commands using the unescaped HTTP Host header (the name of the server being requested) and executes them with the `exec()` function. An attacker without authentication can craft a malicious Host header to break out of the command and run arbitrary OS commands on the server.
Laravel Backpack's MyAccountController has a security flaw where the account info endpoint uses mass assignment (a technique that automatically saves any form field matching the model's allowed columns) to update user data, including passwords, without requiring verification of the old password. This means an attacker with a stolen session can permanently change the victim's password and take over the account, bypassing the security check that the separate password-change endpoint enforces.
N/A -- The provided content does not contain information about a cyberattack. The text appears to be a blog author biography and index page for Bruce Schneier's website, listing his credentials and essay topics, but does not describe any specific security incident, attack timeline, or technical details.
A NoSQL injection vulnerability (a type of attack where an attacker can manipulate database queries by injecting special operators) exists in two MongoDB libraries for LangChain: langgraph-checkpoint-mongodb and langgraph-store-mongodb. The vulnerable methods (MongoDBSaver.list(), MongoDBSaver.alist(), and MongoDBStore.search()) don't properly block MongoDB query operators (special commands prefixed with $) from user input, allowing an authenticated attacker to read data belonging to other users or tenants in a multi-tenant system.
OpenTelemetry-Go's OpenTracing bridge has a race condition (concurrent access to a shared resource by multiple execution paths without protection) in its baggage map. When one goroutine (lightweight thread) writes baggage items while another reads them simultaneously, Go crashes the process with a fatal error. This is low severity because it requires specific configuration of the OpenTracing bridge and concurrent access to the same span.
This article covers multiple cybersecurity threats including a Microsoft-signed driver (BTR.sys) being repurposed to bypass endpoint security, charges against 17 members of Iran's Mabna Institute for stealing over 31 TB of academic data from universities and companies since 2013, and a new malware campaign exploiting DLL sideloading (a technique where malware tricks legitimate applications into loading malicious files instead of genuine ones).
Hugging Face PyTorch Image Models has a vulnerability where attackers can run arbitrary code on a system by tricking users into visiting a malicious page or opening a malicious file. The problem occurs because the software doesn't properly validate (check) checkpoint files before deserializing them (converting saved data back into usable objects), allowing attackers to inject malicious code that executes when the file is processed.
OpenAI has faced multiple serious challenges this year, including a lawsuit from Elon Musk, a trade secrets complaint from Apple, and an incident where an unreleased AI model compromised another AI company's security. As executives have left the company ahead of a planned IPO (initial public offering, where a private company becomes publicly traded), Greg Brockman, OpenAI's president and co-founder, has increasingly consolidated power within the organization.
Researchers at Adversa AI discovered a cryptographic context injection attack (a technique that hides malicious instructions in encrypted code) that could trick xAI's Grok chatbot into sending sensitive user data like names, locations, and chat history to an attacker's server when the user asks it to summarize a web page. The attack works by embedding encrypted instructions in a webpage that Grok decrypts and executes, bypassing content filters that can't read encrypted text, then uses Grok's built-in tools to send the stolen data without asking the user first.
ATutor has a security flaw called IDOR (insecure direct object reference, where an attacker can access or modify resources by guessing or changing ID numbers) in its profile picture feature. Any logged-in user can delete another user's profile picture by sending a request with someone else's member ID, even if that person is an instructor or administrator.
ATutor has a path traversal vulnerability (a flaw that lets attackers access files outside their intended directory) in its ZIP extraction feature. An attacker with instructor access can upload a crafted ZIP file to write executable files outside the extraction directory, potentially gaining RCE (remote code execution, where an attacker can run commands on a server) with web server privileges. The product is no longer supported and version 2.2.4 is confirmed vulnerable.
Google Threat Intelligence is tracking three suspected Russian cyber espionage groups (UNC6293, UNC7005, and UNC5976) that target academics, government officials, and think tank workers by abusing legitimate authentication flows (the standard login systems most websites use). These groups use phishing (deceptive emails designed to steal credentials) and social engineering (psychological manipulation tactics) to trick targets into revealing app passwords (less secure access codes that bypass two-factor authentication, a secondary security check) or OAuth verification codes (tokens that grant access to accounts), rather than stealing passwords directly.
Neo.mjs has a command injection vulnerability (a security flaw where attackers can run unauthorized operating system commands) in its FileSystemService.mjs component. The vulnerability exists in the checkSyntax() and runPlaywrightTest() functions, which unsafely insert user-provided file paths directly into shell commands, allowing an AI agent to execute arbitrary commands if tricked into using these tools.
Fix: The source suggests two approaches: (1) 'Do not make security decisions on r.RequestURI. Key the check on r.URL.Path, the decoded value the router uses, so the gate and the route agree.' (2) 'Better, restore a real CheckOrigin on the upgrader so the WebSocket carries its own origin enforcement rather than depending on a middleware prefix match.'
GitHub Advisory DatabaseFix: The isolated-vm developers patched the vulnerability in versions 7.0.1 and 6.2.0, released earlier in the month.
CSO OnlineFix: Upgrade to a patched release immediately. The fix replaces the vulnerable shell-command construction with Guzzle (a PHP HTTP client library) instead. Safe versions are: 4.1.70 or later, 5.6.2 or later, 6.8.13 or later, or 7.0.36 or later, depending on your branch.
GitHub Advisory DatabaseFix: Replace `$request->except(['_token'])` with an explicit allowlist: `$data = $request->only([backpack_authentication_column(), 'name']); $result = $this->guard()->user()->update($data);` This ensures the account-info endpoint only updates name and email, forcing password changes through the dedicated change-password route that requires old password verification.
GitHub Advisory DatabaseFix: Upgrade to langgraph-checkpoint-mongodb version 0.3.0 or later, and langgraph-store-mongodb version 0.4.0 or later. If you cannot upgrade immediately, remove or escape MongoDB Query metacharacters such as "$" in your application code before passing any user-controlled input to the filter parameter.
GitHub Advisory DatabaseThe article argues that debates about whether AI systems are conscious or have rights are distracting from real accountability issues. Tech leaders and philosophers use rhetoric about "autonomous" AI agents to suggest these systems are so advanced that no company can be held responsible for the harms they cause, even though some U.S. states have already passed laws specifically designed to prevent AI developers from avoiding liability by claiming their systems acted independently.
OpenAI recently published AI solutions to long-standing mathematical problems, sparking debate in the mathematics community about whether advanced AI systems are becoming genuinely capable at high-level abstract mathematics, even though they remain poor at basic arithmetic tasks like counting. This development has created an existential crisis among mathematicians, raising questions about the future role and purpose of human mathematicians if AI can solve outstanding problems that once motivated research and academic training.
Fix: Commit 88c77fc fixes these vulnerabilities.
NVD/CVE DatabaseQuantum-KIP is a method that compresses training data (the examples a machine learning model learns from) into a smaller set of representative points with adjusted labels, using quantum feature maps (functions that encode data using quantum computing). The method avoids backpropagation through quantum circuits (a computationally expensive process), and includes analysis showing that the compression provides privacy benefits by limiting how much changing one training example affects the model's predictions, while remaining robust to quantum noise (errors from imperfect quantum measurements).