NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
DirtyClone Linux Kernel Flaw Enables Root Access via Socket Buffer Corruption
JFrog has released technical details and a proof-of-concept for DirtyClone, a high-severity Linux kernel privilege escalation vulnerability that extends a broader family…
236,000 DCloud Uni-App Sites Fueling Crypto Scams and Phishing Campaigns
Infoblox researchers have identified over 236,000 websites built on a legitimate Chinese open-source framework that are being weaponized for investment scams, pig-butchering…
Ukraine to Convert $8.3M in Seized Crypto Into War Bonds
Ukrainian authorities have placed cryptocurrency seized from an international cybercrime group under state management, with plans to convert the funds into government…
Critical Oracle E-Business Suite Flaw Under Active Exploitation
Attackers are actively exploiting CVE-2026-46817, a critical unauthenticated takeover vulnerability in Oracle E-Business Suite, weeks after Oracle shipped a patch in its…
Agentic AI Creates a New Class of Identity Risk Security Teams Aren’t Ready For
AI agents authenticate, call APIs, and act across production environments using credentials that most organizations have never fully inventoried. Security leaders say…
Straiker Raises $85M Total to Secure AI Agents in Enterprise Environments
California-based Straiker has closed a $64 million Series A to expand its platform for discovering, testing, and protecting AI agents at runtime.…
Claude Code Hijack Attack Hides Payload in DNS, Never Touches the Repo
Mozilla's 0Din researchers have demonstrated how attackers can weaponize Claude Code's autonomous behavior to spawn a reverse shell on developer machines, with…
US Offers $10M Reward for Russian Hackers Targeting Signal and WhatsApp Accounts
The State Department's Rewards for Justice program is offering up to $10 million for information on two FSB- and GRU-linked groups that…
DOJ Seizes Nearly 400 Illegal World Cup Streaming Domains
U.S. authorities took down close to 400 sites illegally broadcasting World Cup matches, warning that pirate streams expose viewers to malware and…
Microsoft Extends Windows Server 2022 Hotpatching Support to October 2027
Microsoft has pushed the hotpatch support window for Windows Server 2022 Datacenter: Azure Edition one year past mainstream end-of-support, giving enrolled organizations…
WhatsApp Launches Username Reservations to Shield Phone Numbers
Meta is letting WhatsApp users reserve a username now, ahead of a broader rollout later this year that will allow contacts to…
Supreme Court: Geofence Searches Require a Warrant Under Fourth Amendment
In a 6-3 ruling, the Supreme Court held that police must obtain a warrant before accessing cellphone location history from tech companies,…