CISA’s own GitHub repository was left publicly accessible for six months, exposing hundreds of megabytes of plain-text passwords, AWS credentials, private keys, and cloud tokens with alarmingly obvious filenames. The repository was taken down within 26 hours after a GitGuardian researcher escalated the disclosure through security journalist Brian Krebs.
GitHub Actions supply chain attack hits actions-cool/issues-helper. Attackers redirected ALL repository tags to malicious commits, stealing CI/CD credentials.
Anthropic’s Mythos AI isn’t just finding bugs—it’s chaining them into working exploits. Cloudflare’s tests show we’ve crossed a new threshold in automated vuln research.
AI is reshaping OSINT: automation powers modern investigations while legacy social tracking tools lose access. The game has changed for digital investigators.
TeamPCP supply chain attack escalates: Jenkins plugin compromised, new worm spreads across npm and PyPI. The loudest activity since March’s Trivy disclosure.
Interpol arrests 201 cybercriminals across 13 countries in Middle East and North Africa. Operation Ramz disrupted major phishing networks and financial scams.
INTERPOL’s Operation Ramz strikes hard: 201 arrested, 382 suspects identified across MENA region. Major cybercrime networks dismantled in historic crackdown.
Linux kernel flaw lets unprivileged users access root-only files. A critical vulnerability breaks fundamental security boundaries. Patch immediately.
Windows 11 finally restoring taskbar features users have demanded for 5 years. Small taskbar and customizable Start menu also in testing.
BREAKING: Hackers already exploiting critical NGINX RCE flaw CVE-2026-42945. Real-world attacks detected days after disclosure. Patch immediately.