Exploited SiteGuard Flaw Can Elevate Attackers to Root or SYSTEM
Attackers are exploiting CVE-2026-106931, a command-injection flaw in SiteGuard Server Edition's default-enabled statistics feature. Administrators should preserve diagnostic evidence before applying the vendor's update or replacement-file patch.
Microsoft Tells Enterprises to Treat AI Agents Like Potential Insider Threats
Microsoft is urging organizations to stop assuming AI agents will always behave as intended, warning that agents with broad access to company systems can act unpredictably or be...
NSA, CISA and NIST Issue New Playbook for Containing AI Agents That Go Rogue
The three agencies have jointly published voluntary guidance covering how organizations should detect, contain, and shut down AI agents that act outside their approved boundaries during training and...
Lookalike Microsoft Teams Domain Caught Harvesting Employee Login Credentials
Researchers have flagged a newly registered domain, teams-cloud[.]live, that closely mimics the Microsoft Teams sign-in page and interface to trick employees into handing over their credentials. One subdomain...
SBI Breach Claim Puts KYC Records of Hundreds of Thousands of Customers in Question
A threat actor calling themselves Siriusim claims to be selling a dataset of roughly 375,000 rows of State Bank of India customer records and thousands of supporting documents...
AI Agents Turn $5,000 Into More Than 100 Website Breaches
A Chinese-language operator used coordinated AI agents to target more than 1,200 websites and reportedly compromise over 100 of them for an estimated $5,000 in token costs. Exposed...
Critical Drupal Field UI Flaw Opens Unauthenticated Takeover Paths
Drupal has patched CVE-2026-108097, a critical Field UI vulnerability that can enable remote code execution when certain contributed modules or custom code are present. At least one confirmed...
Sixteen-Year-Old Broadcom WPS Bug Exposes Routers Over the Air
Research has exposed a memory-corruption flaw in Broadcom's proprietary WPS implementation that can be attacked from wireless range without the network password. Demonstrations recovered a saved key from...