NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Polymarket Loses Over $2 Million After Third-Party Script Compromise
A compromised monitoring script from vendor DebugBear let attackers drain trader funds on Polymarket's international platform before the exchange halted trading and…
Sony’s Japanese ISP So-net Breached, 2.6 Million Subscriber Records Stolen
Attackers broke into the So-net member database in mid-October, exposing personal details of current and former So-net and Plala subscribers along with…
Microsoft Fixes Remote Desktop Failures Tied to Administrator Protection
A known issue that blocked non-admin users from Remote Desktop connections when Administrator protection was enabled has been resolved in the October…
Volt Typhoon’s ‘Silent Train’ Framework Hides Zero-Day Attacks Behind Disposable Relays
Black Lotus Labs says the Chinese state-sponsored group has spent three years running zero-day attacks through rotating chains of compromised routers and…
Cisco Patches Second Exploited ASA/FTD VPN Zero-Day Since August
Cisco has fixed an actively exploited, unauthenticated denial-of-service flaw in Secure Firewall ASA and FTD's SSL VPN service, the second such zero-day…
GoAhead Web Server TLS Bugs Let Revoked Certificates Still Authenticate
Embedded web server GoAhead loaded certificate revocation lists in its OpenSSL backend but never enforced them, letting revoked mutual-TLS client certificates pass…
Microsoft Sets Final Countdown on SMS and Voice Auth for Entra ID
Microsoft is again urging Entra ID admins to move users off SMS and voice MFA before Microsoft-provided telecom delivery for those methods…
Warp Discloses Vendor Breach Exposing AI Agent Logs and Telemetry Data
A third-party vendor compromise in Warp's infrastructure exposed agent decision logs and user telemetry for an estimated 1% of the agentic development…
Microsoft Ships Emergency Windows Updates to Distrust eMudhra CA Certificates
Out-of-band patches KB5134133 and KB5134125 strip trust from seven eMudhra-linked certificates after weak intermediate CA keys were found recoverable in seconds.
DreamHost Resets Email and FTP Passwords After Unexplained Incident
DreamHost has forced password resets for email and FTP accounts after detecting an issue affecting some of its systems, including webmail, though…
CyberStrikeAI: 44 AI Agents Found Automating Attacks on Japanese Targets
Researchers at TrendAI uncovered three exposed server environments showing a framework called CyberStrikeAI using dozens of AI agents to drive or assist…
Genesys Confirms Breach of Internal Systems, Customer Business Data Exposed
Customer experience software vendor Genesys says attackers accessed its internal learning management and CRM systems, exposing business contact and account data, though…