NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
FCC Blocks First Devices Under New Ban on Huawei-Linked Surveillance Chips
The FCC rejected a wireless video transmitter and a dashboard camera built with HiSilicon chips, marking the first enforcement under rules that…
Ruby Patches Onigmo Regex Bugs Tied to Four Critical GitLab RCE Flaws
Ruby has shipped fixes for three memory corruption bugs in its Onigmo regex engine after GitLab traced four critical remote code execution…
Microsoft Teams Adds AI-Powered Phishing Detection Starting November
Microsoft is rolling out context-aware phishing detection in Teams that analyzes conversation behavior rather than just links or files, targeting external first-contact…
Weak eMudhra CA Keys Let Anyone Forge Trusted TLS Certificates
Eight eMudhra intermediate CA certificates were found to use private keys so weak they could be recovered in seconds, prompting emergency revocations…
DHS Orders DeepSeek Products Purged From Federal Civilian Systems
The Department of Homeland Security is directing federal civilian agencies to strip DeepSeek AI products, and anything built on them, from government…
Zeabur to Shut Down After Second Breach in Two Months Exposes 321,810 Accounts
Hosting platform Zeabur is winding down operations by year's end after attackers used leaked plaintext credentials to steal 3.2 million environment-variable records,…
PHP Rushes Emergency Patches After Two Critical RCE Flaws Leak Early
Details of two critical remote code execution vulnerabilities affecting PHP versions 5 through 8 leaked ahead of schedule, pushing the PHP security…
Introducing SECBORN Tools: a free CVE Tracker and Exposure Scanner
Two new free tools on SECBORN: a CVE Tracker that scores and ranks every vulnerability we cover, and a Website Exposure Scanner…
Revolut Outage Knocks Out Banking Services Worldwide
A widespread service disruption hit Revolut on Tuesday, blocking sign-ins, card payments, transfers, and other core features for tens of thousands of…
Plex2Shell Exploit Chain Hits Servers Within a Day of Public PoC
Attackers are chaining four Plex Media Server flaws, tracked as Plex2Shell, to deploy XMRig cryptocurrency miners and a Linux proxy backdoor on…
Judge Rejects WhatsApp’s Contempt Bid Against NSO Group Over Injunction Breach
A federal judge ruled WhatsApp did not provide enough concrete evidence to prove NSO Group violated a court order barring it from…
Rank Math PRO Plugin Backdoored in Supply-Chain Attack on WordPress Sites
A malicious build of the Rank Math PRO SEO plugin was briefly distributed from the vendor's own site, planting persistent backdoors and…