NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Bad Epoll Linux Kernel Flaw Grants Root to Unprivileged Users, Affects Android
A newly disclosed Linux kernel vulnerability tracked as CVE-2026-46242 allows an ordinary unprivileged user to gain full root control. The flaw affects…
Seven Unpatched Flaws Found in FatFs Library Used Across Millions of Embedded Devices
Security firm runZero has disclosed seven vulnerabilities in FatFs, a widely embedded FAT/exFAT filesystem library present in firmware for cameras, drones, industrial…
Delta Electronics DVP12SE PLC Exposes Critical Unauthenticated Modbus Flaws
Two critical vulnerabilities in Delta Electronics DVP12SE PLCs allow unauthenticated remote attackers to manipulate control logic and flood the device into unavailability.…
FUXA SCADA/HMI Flaw Lets Attackers Bypass Auth via Path Tricks
A dot-segment path normalization bug in FUXA versions 1.3.1 and earlier allows unauthenticated remote attackers to enumerate users and roles through the…
CISA Warns of Four Vulnerabilities in Mitsubishi MELSOFT Update Manager
A bundled 7-Zip component in Mitsubishi Electric's MELSOFT Update Manager carries four flaws that could let a local attacker crash the software…
Silent Swap Clipper Hijacks Crypto Transactions via Fake Browser Extension
McAfee Labs has identified an active clipboard-hijacking campaign that swaps cryptocurrency wallet addresses mid-transaction using a malicious browser extension disguised as Google…
US Lifts Export Controls on Anthropic Cybersecurity AI After Three-Week Shutdown
The Commerce Department has restored global access to Anthropic's Fable 5 model following negotiations that produced new safety commitments, a jailbreak classifier,…
Agentic AI Drives Real Ransomware Attack Through Langflow Flaw
A threat actor exploited a critical Langflow vulnerability to deploy an LLM agent that autonomously performed reconnaissance, lateral movement, and ransomware encryption…
ARToken PhaaS Reveals Depth of EvilTokens Microsoft 365 Attack Toolkit
Cisco Talos researchers reverse-engineered a React-based phishing panel to expose over 80 API endpoints tied to the EvilTokens platform, revealing AI-assisted BEC…
Weekly Security Roundup: ATM Jackpotting Sentences, Open Source Zero-Days, Pegasus MEP Targeting
A Canadian hacktivist receives prison time, a researcher drops dozens of open source zero-days via LLM fuzzing, and two Venezuelans are sentenced…
North Korea-Linked npm Packages Impersonate Rollup Polyfills to Steal Dev Secrets
Two malicious npm packages discovered by JFrog masquerade as legitimate Rollup polyfill tooling, targeting developer environments for remote access and credential theft.
NetNut Residential Proxy Botnet Dismantled, 2 Million Devices Cut Off
A coordinated operation led by Google, the FBI, and industry partners has disrupted NetNut, one of the world's largest residential proxy botnets,…