NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Cisco Patches Actively Exploited ASA/FTD VPN Flaw That Crashes Firewalls
Cisco has shipped fixes for a high-severity vulnerability in Secure Firewall ASA and FTD software already being exploited in the wild, allowing…
Critical Linux Kernel TCP Flaw Hits Ubuntu, RHEL; AI Wrote the Exploit
A 9.8-rated flaw in the Linux kernel's TCP stack, CVE-2026-98432, affects major distributions including Ubuntu and Red Hat, and Anthropic says its…
Critical Linux Kernel Bug Lets Attackers Get Root via MPTCP, AI Built the Exploit
A use-after-free in the Linux kernel's TCP networking code, rated 9.8 severity, can be remotely exploited for root code execution on MPTCP-enabled…
Malicious ChatGPT Share Link Could Hijack Sessions, Leak Private Chats
Researchers at Parameter found that a crafted ChatGPT share link could execute attacker code in a victim's logged-in session, exposing private conversations.…
Android SMS of Death Exploit Lets Attackers Crash Phones With One Text
A proof-of-concept for CVE-2026-58882 shows how a malformed WAP Push message can crash Android's phone process, killing calls and triggering reboot loops…
Florida Financial Aid Site Breach Exposes SSNs of 4.9 Million People
Florida's Department of Education says an unauthorized party accessed a system tied to the state's student financial aid website, exposing names, addresses,…
Reddit to Require Logins for Full Site Access to Curb Scraping
Reddit plans to shift toward a logged-in service, starting with a pilot outside the US, citing the need to fight content scrapers…
Syrian Electronic Army Hacker Sentenced to 42 Months for Western Media Attacks
Ahmad Umar Agha, known online as Th3Pr0, was sentenced in a Virginia federal court for a years-long hacking conspiracy tied to Assad…
Trojanized Claude Code Extension Hit Cursor Marketplace for 11 Hours
A tampered version of Anthropic's Claude Code extension was briefly distributed through Cursor's marketplace under the real publisher identity, attempting to plant…
TeamViewer Patches Flaw That Lets Controlled Machines Attack the Controller
A fixed TeamViewer vulnerability allowed a malicious or compromised host device to turn the tables on the viewer, crashing its TeamViewer client…
Drupal Commerce Core Flaw Under Active Exploitation, Patch Now
A highly critical access bypass in Drupal's Commerce Core module is being exploited against online stores, letting unauthenticated attackers manipulate orders on…
CISA Adds Actively Exploited GitLab RCE and Cisco Firewall Flaws to KEV
CISA has flagged a maximum-severity GitLab integer overflow vulnerability and a Cisco firewall denial-of-service flaw as actively exploited, ordering federal agencies to…