Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
> Search
30 results for “rce”
Cyber Crime
AI & MLAnthropic AI's false murder tip sparks probe
An Anthropic model sent a false homicide tip to Philadelphia police in July; the company didn't detect it until September, prompting a city rebuke.
SecurityLightwell Uncovers 400+ Java Library Flaws
IBM and Red Hat's Lightwell project has identified over 400 novel vulnerabilities in Java libraries, launching a clearinghouse service for customers to submit code for review.
Cyber CrimeFake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
AI & MLAWS Sandbox Targets Rogue AI Agents
AWS's new Strands Box uses OS isolation and custom policies to curb AI agent behavior, but security experts warn controls have gaps.
Cyber CrimeShinyHunters Suspect Tied to Boeing Unit Extortion
A detained Jordanian teen accused of leading ShinyHunters allegedly extorted a former Boeing unit before his arrest, sources say.
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
SecurityRed Hat Batch-Fixes 400 Open-Source Flaws
Red Hat's Lightwell Clearinghouse exits pilot after remediating over 400 novel vulnerabilities in foundational Java libraries since June.
Tech NewsMemory Crisis May Stretch to 2030, Prices Still Climbing
A source at Chinese chipmaker YMTC reportedly says the global memory shortage will last at least three more years, as TrendForce predicts further RAM price hikes.
SecurityGoogle Pauses OSS Bug Bounty Submissions
Google has temporarily stopped accepting product vulnerability reports for its OSS VRP, citing a surge in automated, mostly invalid submissions.
Cyber CrimeRCE flaw in Rejetto HFS now exploited
Attackers are exploiting CVE-2026-61500 in Rejetto HFS to bypass authentication and gain remote code execution, according to VulnCheck.
AI & MLTrump Taps Clayton to Lead AI Task Force
President Trump names intelligence director Jay Clayton to head a new federal AI task force, following a voluntary self-policing accord with tech firms.
SecurityEU CRA ends manual vuln triage
Security experts say the EU Cyber Resilience Act's 24-hour reporting mandate makes manual vulnerability triage obsolete and forces global vendors to automate or risk losing market access.
SecurityAI-Discovered Flaws Skew Toward RCE
Google's threat intelligence unit reports AI-found vulnerabilities are far more likely to enable remote code execution than other disclosed flaws.
SecurityF5 zero-day hits BIG-IP APM deployments
F5 patched a critical BIG-IP APM zero-day exploited in remote code execution attacks, as CISA ordered federal agencies to secure networks by Friday.
SecurityWordPress 7.1.2 Patches Critical LFI-to-RCE Flaw
WordPress fixed a critical flaw in versions 4.7.0 through 7.1.1 that can lead to code execution on servers lacking a page-prefixed theme folder and register_argc_argv off.
SecurityMalware Now Lets AI Pick Its Next Move
Cisco Talos says CLOSEDQUORUM is the first publicly documented Windows implant to outsource command-and-control to large language models.
Cyber CrimeThird-Party App Key Opens Door to BigCommerce Data Theft
Attackers used a compromised credential from the Ribon app to pull customer data from hundreds of online stores, exposing a soft spot in e-commerce supply chains.
SecurityAI Response Drills Fall Short as Use Grows
ISACA finds that 71% of organizations have not rehearsed for an AI-related security incident, even as AI adoption accelerates.
TrendingRTX 6000 Slips to 2028, Leaker Says
A prominent leaker claims Nvidia's next-gen GeForce GPUs won't arrive until 2028, with the memory shortage cited as a likely factor.
Cyber CrimeCrowdSec Ties Code Theft to TanStack Flaw
CrowdSec says about 300 repositories were hit and links the theft to a May 2026 TanStack supply chain attack.
AI & MLTrump floats new name, AI Force plan
Trump posted a poll on renaming AI and said he is forming an AI Force, as the AI safety debate continues.
SecurityIndia Tightens Grip on Caller-ID Apps
TRAI's amended rules force caller-ID apps to feed spam reports into a telecom blockchain, drawing accusations of anti-competitive data transfer from Truecaller.
Cyber CrimeFake Cop Scams Cost Victims $1.6B
FBI's IC3 logged nearly 61,000 impersonation complaints from January 2025 to July 2026, with average losses exceeding $26,000.
Cyber CrimePlugin4Shell Exposes AI Coding Agents to RCE
A zero-click remote code execution flaw in popular AI coding agents could let attackers run malicious code without developer interaction, researchers warn.
SecurityUnbound DNSSEC Flaw Opens RCE Path
A heap overflow in Unbound's DNSSEC validator lets attackers who control a malicious DNS zone trigger remote code execution on vulnerable resolvers.
SecurityOfcom's Unpaid Fines Problem Grows
UK regulator admits most Online Safety Act penalties remain uncollected, as platforms comply just enough to avoid being blocked.
SecurityWooCommerce Plugin Flaw Fuels Web Shell Attacks
Attackers are exploiting a critical WooCommerce Wholesale Lead Capture vulnerability to upload PHP web shells and achieve remote code execution.
AI & MLExaforce AI Security widens agent watch
Exaforce extends its AI security tool beyond Claude to monitor OpenAI, Gemini and Copilot agents using existing SOC telemetry.
SecurityMarimo RCE Hit by Human at Machine Speed
Sysdig says a hand-built toolkit let a human operator exploit a Marimo flaw in eight seconds, without any sign of LLM use.