New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

06/06/2026 0 Comments 0 tags

OpenAI has begun rolling out a new Lockdown Mode to ChatGPT for eligible personal accounts to reduce the risk of data exfiltration arising from prompt injection attacks. The feature is

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

06/06/2026 0 Comments 0 tags

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a high-severity security flaw impacting SolarWinds Serv-U multi-protocol file server software to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

06/06/2026 0 Comments 0 tags

A researcher has reverse-engineered the iOS SDK that Bright Data embeds in consumer apps and documented how it turns devices, including always-on smart TVs, into exit nodes that relay web-scraping

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

06/06/2026 0 Comments 0 tags

Microsoft’s GitHub repositories have become the latest to fall victim to the ongoing Miasma self-replicating supply chain attack campaign. The incident impacted 73 Microsoft repositories across four of its GitHub

AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs

06/06/2026 0 Comments 0 tags

Two things landed within days of each other this week. A security startup reported 21 previously unknown vulnerabilities in FFmpeg, the media library inside almost everything that touches video, all

Cisco Catalyst SD-WAN Manager CVE-2026-20245 Flaw Actively Exploited – No Patch Available

06/06/2026 0 Comments 0 tags

Cisco has warned that a high-severity security flaw impacting Catalyst SD-WAN Manager has come under active exploitation. The vulnerability, tracked as CVE-2026-20245, carries a CVSS score of 7.8 out of

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

05/06/2026 0 Comments 0 tags

Multiple software supply chain attacks have hit the npm ecosystem, with threat actors using both malicious and poisoned versions of over 50 legitimate packages to distribute a Rust-based information stealer

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

05/06/2026 0 Comments 0 tags

Arabic-speaking users have emerged as the target of a new Android spyware codenamed Asin, according to findings from ESET. The Slovakian cybersecurity company said it first detected the malware spread

New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework

05/06/2026 0 Comments 0 tags

Cybersecurity researchers have discovered a previously unreported threat cluster dubbed OP-512 that has been observed targeting Microsoft Internet Information Services (IIS) servers to deploy a bespoke web shell framework. ReliaQuest

Only 10% of SOCs Say They’re Getting Excellent Value From AI. Here’s What the Second Wave Has to Deliver

05/06/2026 0 Comments 0 tags

Eighteen months ago, the AI SOC was a marketing line. Today it’s a budget item. The category has crossed over from interesting to inevitable, with billions of dollars now flowing