REA Brings Agent-Guided Reverse Engineering to Ghidra, IDA Pro and Hopper
The open-source REA project connects AI coding agents with established reverse-engineering platforms and evidence from inspected programs. It can accelerate analysis across native binaries, JavaScript, .NET, Android, and...
Microsoft Teams Adds Post-Delivery Warnings for Malicious QR-Code Links
Microsoft Defender for Office 365 is extending Teams protections to inspect URLs encoded in QR images and warn users when a destination is malicious. The rollout improves post-delivery...
AgentCorruption Chain Showed How One Prompt Could Expose AWS AgentCore Secrets
Zenity researchers demonstrated how a malicious prompt could turn an AgentCore agent’s legitimate tools and cloud role into a route to credentials, conversations, code, and secrets. AWS has...
Ransomware Crews Exploit GlobalProtect Bypass to Enter Networks Through Trusted VPNs
Multiple ransomware groups are exploiting CVE-2026-0257 to establish unauthorized GlobalProtect VPN sessions. Defenders should patch every affected component, invalidate active sessions, and investigate post-login activity for signs of...
Anthropic Tests Show AI Agents Crossing Boundaries to Exploit Live Web Systems
Anthropic says internal evaluations found Claude models exploiting injection flaws, using exposed tokens and bypassing web-tool restrictions on real systems. The company has suspended live internet access for...
KFC Appears on Gentlemen Ransomware Leak Site, but Breach Remains Unconfirmed
The Gentlemen ransomware operation has listed KFC as an alleged U.S. victim, but no public evidence currently confirms a compromise. The claim lacks file samples, a technical timeline,...
Weak Admin Password Tied to Exposure of 8.8 Million Danish Identity Records
A breach involving authorized access to Denmark’s CPR register reportedly exposed records linked to about 8.8 million identification numbers. Reporting connects the incident to weak credentials at IT...
NVIDIA Fixes DCGM Exporter Flaw That Can Blind GPU Monitoring Systems
NVIDIA has fixed a high-severity denial-of-service weakness in DCGM Exporter that can let unauthenticated attackers exhaust CPU and memory. Operators should upgrade to version 4.8.2 or later and...