NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Telus Notifies Customers of Account Takeovers Tied to Compromised Credentials
Canadian telecom giant Telus is warning consumer customers that attackers used stolen credentials to access accounts and personal data, then tried to…
CISA Confirms Active Exploitation of Max-Severity GitLab Flaw
Attackers are exploiting a critical unauthenticated path traversal bug in GitLab's repository commits API just days after a patch shipped, prompting CISA…
China-Linked Hackers Exploit Sogou Input Method Flaw to Drop GrayRabbit Backdoor
A one-click RCE bug in Tencent's Sogou Input Method for Windows let the UNC3569 threat group chain three flaws into full code…
NSA to Restructure Into Five Mission Centers Under Rudd, Adding Dedicated AI and Cyber Units
The National Security Agency is undergoing a rapid, sweeping reorganization that will replace its existing directorates with five mission centers focused on…
AI Adoption Is Flooding SOCs With a New Class of Alerts
Security teams are seeing a fast-growing wave of alerts tied not to attacks on AI, but to everyday employee and developer use…
Google Launches Fairwind Program to Give Governments AI-Driven Vulnerability Patching
Google is opening limited access to Gemini 3.8 Flash Cyber paired with its CodeMender harness, letting select governments and enterprises autonomously find…
BlueMoon Exploit Kit Chains Chrome and Windows Zero-Days Across Espionage Groups
Proofpoint says a newly discovered exploit kit combining two Chrome V8 zero-days and a Windows ALPC privilege escalation flaw was rapidly adopted…
Dutch NCSC Warns of Imminent Attacks on Critical Check Point VPN Flaws
Two unauthenticated remote code execution bugs in Check Point's VPN stack have patches available, and the Netherlands' national cyber agency says exploitation…
Cisco FMC Bugs Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco Talos says three separate threat clusters, including ransomware affiliates and a group overlapping with the Russian Sandworm APT, exploited two Secure…
CISA Flags Active Exploits in JFrog and ConnectWise as GitLab Rushes Critical Patch
CISA added three actively exploited flaws in JFrog Artifactory and ConnectWise ScreenConnect to its KEV catalog, while GitLab pushed emergency fixes for…
Microsoft Says Ignore False ‘Antivirus Turned Off’ Alerts After Defender Update
A bug in recent Microsoft Defender Antivirus updates is triggering false alerts that protection is disabled across Windows client and server systems.…
Federal Judge Rules Pentagon’s Anthropic Retaliation Was Illegal
A U.S. District Judge found the Defense Department unlawfully punished Anthropic for criticizing its AI policies, ruling the supply chain risk designation…