​GitLab has released patches to address multiple flaws, including a maximum-severity security vulnerability that has witnessed in-the-wild probes within hours of public disclosure. The vulnerability in question is CVE-2026-85706 (CVSS… Read More »GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure

​Anthropic on Thursday revealed it disrupted a campaign mounted by a Russian state-sponsored threat actor that abused Claude for developing an AI-assisted workflow to get ahead of the detection curve.… Read More »Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection

​Anthropic has warned that cybercriminals and state-sponsored hackers alike are using its Claude models for cyber attacks, weapons design, propaganda, and mass surveillance between December 2025 and August 2026. The… Read More »Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

​Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path… Read More »Your Critical Vulnerabilities Might Not Be Your Biggest Risk

​Cisco has revealed that three distinct threat clusters linked to ransomware and state-sponsored attacks have been exploiting two recently patched Secure Firewall Management Center (FMC) vulnerabilities. The attacks leverage CVE-2026-20079… Read More »Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware

​PaperCut on Thursday released a new security maintenance release that replaces all previously published emergency patches that were pushed to address two security flaws that have come under active exploitation.… Read More »PaperCut Replaces Emergency Patches With Fixes for Two Actively Exploited Flaws

​A China-linked hacking group exploited a flaw in Sogou Input Method, one of the most widely used tools for typing Chinese characters on Windows, to install a backdoor on victims’… Read More »China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

​Attackers have chained two flaws in JFrog Artifactory, the repository that software build pipelines pull from, to take administrator control of self-hosted servers and plant backdoors, cloud security company Wiz said… Read More »Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors

​A lot of this week’s security news has the same awkward answer to one question: “Why was that allowed to work?” An extension asks for access and takes too much.… Read More »ThreatsDay: 200 Android Flaws, Browser-Built Phishing, 119K Scam Shops + 23 More Stories