NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
University of Copenhagen Breach Exposes Data of 525,000 People
Hackers accessed a university test environment containing names, national ID numbers, phone numbers, and emails, with an additional 20,000 staff and students…
Kali Linux 2026.3 Lands With Six New Pentesting Tools and KDE Plasma 6.7
The third Kali release of 2026 adds tools for XSS scanning, crawling, port scanning and SMB credential hunting, alongside a kernel bump…
Critical Wasmtime Flaws Could Let WebAssembly Modules Break Out of Their Sandbox
Wasmtime maintainers have patched two critical vulnerabilities that could allow a malicious WebAssembly module to escape the runtime's sandbox, with one flaw…
Siemens Patches Path Traversal, Password Leak in S7 Webserver API Library
Two vulnerabilities in Siemens' .NET Client Library for SIMATIC S7 Webserver API could let attackers write files outside intended directories or recover…
eMudhra to Quit Global SSL/TLS Market After Guessable CA Keys Found
Indian certificate authority eMudhra will exit the global SSL/TLS certificate business after a researcher recovered private keys for eight of its intermediate…
Railway Tells Users to Rotate Secrets After Possible Environment Variable Breach
Cloud hosting platform Railway says an unauthorized third party may have accessed and decrypted customer environment variables, part of a wider wave…
PHP2Shell Flaws Draw Mass Scans as Attackers Chase Mirai Deployment
Millions of exploit attempts are targeting newly disclosed PHP2Shell vulnerabilities as attackers try, and mostly fail, to pull vulnerable systems into the…
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agent Wallets
A flaw in the x402 payment SDKs' default client let malicious APIs request full token balances from AI agents before spending limits…
Quest Diagnostics Confirms Breach Exposed Patient Records via Lab Portal
The clinical lab giant says unauthorized access to its Quanum LSM ordering and results platform compromised patient data, prompting a shutdown of…
Quest Diagnostics Takes Lab Results System Offline After Breach
Quest Diagnostics paused its Quanum Lab Services Manager platform after discovering unauthorized access, warning that patient data may have been accessed.
Leaked LiteLLM Master Key Let Attackers Hijack Release Pipeline
A master key accidentally committed to a public GitHub repository in May 2026 gave attackers the access needed to push a malicious…
PHP Discloses Unpatched RCE Flaw, Offers Mitigation Pending Fix
PHP's security team detailed a new remote code execution vulnerability affecting an uncommon configuration, days after rushing out patches for the actively…