Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
What's new: A Chinese-speaking threat actor utilized the open-source Hermes Agent framework to command an AI model named DeepSeek for...
Month: July 2026
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
What's new: Device code phishing, leveraging the OAuth 2.0 device authorization grant, has rapidly evolved into a significant threat, with...
NSAuditor AI Enterprise 0.32.9: Stricter Evidence Gaps and Cleaner Compliance Packs
<p>Nsasoft US LLC has released <strong>NSAuditor AI Enterprise Edition 0.32.9</strong>, a report-quality release focused on how compliance evidence is presented...
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
What's new: Broadcom has released security updates for multiple VMware products, addressing three critical vulnerabilities: CVE-2026-59309 (authentication bypass in vCenter),...
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
What's new: A critical vulnerability (CVE-2026-59726, CVSS score: 10.0) has been discovered in Ruflo, an open-source agent meta-harness for AI...
