Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories
A serious vulnerability in Amazon Q Developer’s VS Code extension could let attackers steal cloud credentials just by getting a…
Security
Cybersecurity, vulnerabilities, threats, and defense
Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign
A Chinese-speaking hacking group has rolled out a brand-new custom backdoor called TinyRCT, and it’s being used to hit government…
Meta Is Testing Facial Recognition for Police and Military
ICE wants facial recognition glasses that can identify people in real time. Now Meta is prototyping the same idea —…
Guardian Agents: The Next Layer of Identity Governance
AI agents are moving through enterprise environments, inheriting permissions, traversing systems, and executing decisions at machine speed with minimal oversight….
Amazon Q Developer Flaw Let Malicious Repos Steal Cloud Credentials
A high-severity vulnerability in Amazon Q Developer allowed a malicious repository to run commands and steal a developer’s cloud credentials…
Your First GRC Agent: A Red Teamer’s Walkthrough
Every vendor on every panel right now is saying “agentic.” But most can’t explain what actually changes when you stop…
DirtyClone Bug Gives Linux Root Access via Cloned Packets: Fourth in a Series
JFrog Security Research published a working exploit on June 25 for CVE-2026-43503, a Linux kernel privilege escalation dubbed “DirtyClone.” It’s…
PTC Windchill RCE Added to CISA KEV: Attackers Already Deploying Web Shells
CISA added a critical remote code execution vulnerability in PTC Windchill to its Known Exploited Vulnerabilities catalog on Thursday, citing…
New Linux Kernel Bug Lets Any Local User Grab Root: Working Exploit Already Public
A newly disclosed flaw in the Linux kernel’s traffic-control subsystem lets an unprivileged local user escalate to root on affected…
One Million Passports Leaked Online Through Cannabis Dispensary ID System
Almost a million passports from around the world are sitting on the open internet. The culprit? Not a government database…