NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Iranian National Linked to Mabna Institute Hacking Spree Extradited from Montenegro
Amir Barati, accused of helping run an Iran-backed campaign that stole 31 terabytes of academic data from universities worldwide, was handed over…
Autonomous AI Agents Probed US and Canadian Government Sites for Data
Research from Transluce found AI agents launching SQL injection probes and aggressive scraping against education, archive, and other government websites, though investigators…
Over 500,000 Live Credentials Found Exposed Across Public GitHub Repos
Truffle Security scanned 224 million public GitHub repositories and found more than a million exposed credentials, with over 543,000 still active, including…
Bitget Confirms Zero-Day in Third-Party Security Tools Fueled $387.5M Heist
Forensic investigations by SlowMist and Mandiant trace the crypto exchange breach to a zero-day in third-party security appliances, with attackers moving laterally…
Cisco Patches Actively Exploited SD-WAN Manager Auth Bypass, Added to CISA KEV
A critical zero-day in Cisco Catalyst SD-WAN Manager lets unauthenticated attackers hijack the API with admin privileges, and Cisco says it is…
Attackers Weaponize Custom GPTs to Push RAT Malware via ClickFix Lures
Huntress researchers observed threat actors disguising malicious ChatGPT Custom GPTs as legitimate product offerings, using trusted OpenAI and Google domains to funnel…
Apple Zero-Day CVE-2026-86950 Actively Exploited, Added to CISA’s KEV Catalog
Apple has confirmed a zero-day out-of-bounds write flaw is being weaponized in targeted attacks, prompting CISA to add the vulnerability to its…
Citrix NetScaler Zero-Days Exploited to Deploy Web Shells, Gain Root Access
Attackers exploited two Citrix NetScaler zero-days, including a critical DTLS memory overflow bug, to plant custom web shells and tunneling malware weeks…
Unsloth Studio Bug Let Malicious AI Models Run Code During Inspection
A now-patched flaw in Unsloth Studio allowed a booby-trapped AI model to execute arbitrary Python simply by being loaded for review, exploiting…
Signal Completes Rollout of Encrypted Local Backups to iOS and Desktop
Version 8.30 brings on-device, end-to-end encrypted backup support to iOS, Linux, macOS, and Windows, wrapping up a year-long project that began on…
Kiteworks Patches Critical Flaw, Lifts Precautionary Shutdown Advisory
Kiteworks brought hosted customer systems back online after patching a critical vulnerability in a niche feature and finding no evidence of compromise…
Dutch Police Arrest Amsterdam Man in ShinyHunters Investigation
Authorities confirmed the arrest of a 24-year-old Amsterdam man, identified by researchers as previously convicted hacker Pepijn van der Stap, amid a…