Eduard Kovacs

CISA has also published several advisories describing vulnerabilities in ICS and other OT products.

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.

The Water Watch Center launched at DEF CON aims to help under-resourced utilities protect their systems against hackers.

The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.

OpenAI has also announced the expansion of its Daybreak platform to give more organizations access to its AI.

The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.

The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold. 

Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US states.

CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.

The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies.

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. 

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.

Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.

Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption.

Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.