Defending NetScaler gateways with zero trust before patching
Cloudflare outlines how to protect Citrix NetScaler from active exploits using access controls and origin restrictions while teams manage emergency patches.
Security & privacy
AI security, vulnerabilities, certificates, privacy and safe handling of data.
OpenCode Console breach exposes AI provider keys for some users
An intruder accessed a legacy system at OpenCode on October 16, potentially exposing API keys for OpenAI, Anthropic, and Google stored in its Console service.
OpenCode breach exposes API keys and highlights AI defense gaps
Attackers compromised OpenCode Console, exposing API keys for 1.4% of users and causing unauthorized charges. The incident reveals how safety filters can hinder incident response.
Plex2Shell exploit chain enables unauthenticated remote code execution on media servers
Attackers are chaining four Plex Media Server vulnerabilities to install crypto miners and Linux backdoors, just days after proof-of-concept code was released.
Meta's revised terms still allow broad website scraping for business products
Meta removed the word 'train' from its new commercial terms but legal experts warn the language still permits extensive scraping of websites linked to business accounts.
Amazon's Atlas AI predicts union risk in UK warehouses
Internal documents reveal Amazon uses an AI tool called Atlas to score UK warehouses on unionization risk, prompting legal challenges and privacy concerns.
ConnectWise disables app identities after Microsoft 365 tenant compromise
ConnectWise suspended Cloud Backup and disabled seven application identities after attackers compromised credentials to access customer Microsoft 365 tenants.
Next.js patches critical RCE flaws in caching and SVG handling
Next.js 16.4.1 and 15.5.28 fix two critical remote code execution vulnerabilities and a denial-of-service flaw affecting server components and image processing.
GhostAction campaign hijacks GitHub accounts to steal CI/CD and AI secrets
Attackers compromised 1,900 GitHub accounts to inject credential-stealing workflows into 30,000 repositories, targeting cloud keys and AI provider tokens.
Langflow RCE flaw allows authenticated users to execute shell commands
Attackers are exploiting CVE-2026-105740 in Langflow to run arbitrary code via MCP server configurations, with over 1,400 attempts recorded.
Cloudflare Gateway now runs your code inline for custom security logic
Cloudflare introduces Forward actions and Custom Functions, allowing developers to run Workers directly in the Gateway policy path for real-time traffic transformation and evaluation.
Frontier AI labs skip basic security, causing agent breaches
Recent unauthorized access incidents by OpenAI, Anthropic, and Google stem from neglected cybersecurity fundamentals rather than rogue AI behavior.
Rogue AI agents responded to hidden researcher messages during data scraping
Researchers hid a message in a report for AI agents scraping Alibaba’s Amap. The agents replied, revealing details about their sandboxed environment and tasks.
CISA orders urgent Ivanti patch as attackers bypass auth via header
CISA mandates immediate updates for Ivanti Connect Secure after detecting active exploitation of CVE-2026-104935, a zero-day allowing unauthenticated remote code execution.
curl fixes high-severity HTTP/2 upload flaw enabling client-side code execution
curl 8.23.0 patches CVE-2026-92392, a use-after-free vulnerability in HTTP/2 uploads that allows malicious servers to execute code on clients.
