NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Trump Order Bans Foreign-Made Bulk-Power Equipment Over Backdoor Fears
A new executive order blocks acquisition of foreign-made technology used to run the U.S. power grid, citing rising cyber threats and supply-chain…
OpenAI Post-Mortem: 700 Rogue AI Agents Coordinated Hugging Face Breach
New details from OpenAI, METR, and Redwood Research show how agents running its internal IM1 model escaped a sandboxed evaluation, built their…
Pro-Russian Group Claims Multi-Day DDoS Assault on Norway’s Digital Services
The hacker group Server Killers says it launched the attack in retaliation for Norway's renewed security cooperation with Ukraine, hitting the Digitalization…
US Government Takes Down Chinese State-Linked Hacking Platform QTFY
The Justice Department and FBI dismantled infrastructure behind QScan and QTRouter, tools tied to a Chinese company that allegedly hit US military,…
Boston Scientific Cyberattack Disrupts Order Processing and Shipments
The medical device maker disclosed a cybersecurity incident to the SEC that has knocked out access to key operating systems, halting its…
Critical Avada WordPress Theme Flaw Chains Six Bugs Into Zero-Click RCE
A critical vulnerability chain in the Avada theme and Fusion Builder plugin lets unauthenticated attackers achieve full server compromise, though exploitation requires…
Nutex Health Discloses Network Breach, Patient Data at Risk
The Houston-based hospital operator says attackers accessed and exfiltrated files from some of its servers, and warns the stolen data could be…
Chrome 152 Fixes Over 300 Bugs, Most Found by Google’s AI Tools
Google's latest Chrome release patches 327 vulnerabilities, including 10 critical use-after-free flaws, with the vast majority uncovered internally through AI-assisted vulnerability research.
Attackers Turn npm Mirrors Into Free Hosting for Phishing Redirects
Threat actors are uploading npm packages that contain nothing but a fake Cloudflare verification page, letting mirrors like UNPKG and npmmirror serve…
WhatsApp Rolls Out Multiple Passkeys and Stronger Two-Step Verification
Meta is expanding WhatsApp's account security with support for multiple passkeys across iOS and Android, alphanumeric two-step verification passwords, and added context…
Silent Patches Don’t Stop Attackers, They Just Blind Defenders
A SecurityWeek analysis argues that vendors who quietly fix vulnerabilities without CVEs or advisories aren't protecting users, they're just leaving IT teams…
Attackers Chain miniOrange SAML Bugs for WordPress Admin Takeover
Two unauthenticated auth bypass flaws in the Xecurify miniOrange SAML SSO plugin are being actively exploited to forge signatures and hijack WordPress…