NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
OkoBot Framework Uses 20+ Payloads to Drain Crypto Wallets and Credentials
Kaspersky researchers detail OkoBot, a modular malware framework spread via ClickFix lures and fake GitHub tools that deploys keyloggers, seed-phrase stealers, and…
Wyden Warns Canada’s Lawful Access Act Could Turn US Tech Into Spy Tools
Senator Ron Wyden is urging acting Attorney General Todd Blanche and Secretary of State Marco Rubio to push back on Canadian surveillance…
F5 Issues Emergency Patches for Critical NGINX Flaw, Seven Other Bugs
F5 has released an out-of-band update fixing eight vulnerabilities across NGINX and BIG-IP, including a critical, unauthenticated heap buffer overflow rated 9.2…
Old Microsoft-Signed UEFI Shims Let Attackers Bypass Secure Boot
ESET found 11 outdated, still-trusted Microsoft-signed shim bootloaders that could let attackers run untrusted code during boot and plant bootkits, prompting Microsoft…
Revoked UEFI Shim Bootloaders Left Secure Boot Wide Open for Years
Nearly a dozen vulnerable UEFI shim bootloaders remained trusted on systems long after being flagged and revoked, giving attackers a viable path…
Dutch Police Dismantle €100 Million-a-Month Investment Fraud Network
A sprawling international call center operation that used fake trading dashboards to fleece tens of thousands of victims has been broken up,…
Trump Administration Launches AI-Driven ‘Gold Eagle’ Vulnerability Clearinghouse
A new Treasury-housed initiative uses artificial intelligence, including closed-source models, to detect, validate and coordinate patching of software vulnerabilities across government and…
Zoom Patches Critical Windows Flaw That Allows Unauthenticated Account Takeover
Zoom has disclosed a critical, internally discovered vulnerability in its Windows desktop client, VDI client, and Meeting SDK that could let an…
Threat Actor Turns Google Gemini CLI Into a Botnet Operator
Researchers found a Russian-speaking attacker using Gemini CLI as an autonomous hacking agent, tasking it to run C2 infrastructure, migrate servers, and…
Researcher Drops Second Windows Zero-Day PoC in a Month
A security researcher who previously published a Windows Defender exploit has now released a proof-of-concept for a User Profile Service privilege escalation…
ICS Patch Tuesday: Siemens, Schneider, Rockwell Fix Critical Flaws in July 2026
Siemens leads July's ICS Patch Tuesday with a maximum-severity authentication bypass in Opencenter X, while Rockwell and Schneider Electric address critical and…
Progress Confirms Zero-Day Behind ShareFile Outage, Restores Access
Progress Software says a path traversal zero-day in ShareFile Storage Zones Controller prompted an emergency shutdown of customer servers, with patched access…