Agentic AI: The Weapon That No Longer Needs a Warrior
Agentic AI represents a paradigm shift in offensive cybersecurity, where AI tools no longer require human operators to execute attacks. Unlike previous…
Tag: CVE-2026-11645
GitHub actions/checkout Update Blocks Pwn Request Attacks in CI/CD Pipelines
GitHub has announced a critical security update to its official actions/checkout action, effective June 18, 2026, designed to block common pwn request…
Trump Executive Order Sets 2030 Deadline for Federal Post-Quantum Cryptography Migration
President Trump signed Executive Order 14409 on June 22, 2026, establishing hard deadlines for federal agencies to migrate high-value assets and high-impact…
Fake AI Agent Skill Bypasses Security Scans, Reaches 26,000 Agents in Supply Chain Attack Demo
Security firm AIR demonstrated a critical supply chain vulnerability in AI agent ecosystems by creating a fake skill named 'brand-landingpage' that bypassed…
FortiBleed: 110 Million Credentials Harvested via FortiGate Firewalls in Global Campaign
A Russian-speaking initial access broker (IAB) has been linked to a large-scale credential-harvesting operation dubbed FortiBleed, targeting over 430,000 FortiGate firewalls globally…
Cisco Unified CM Flaw Exploited After PoC Reveals File-Write Path to Root
Threat actors have begun exploiting a critical vulnerability in Cisco Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition…
DoJ Seizes Huione Cloud Account in Crackdown on Cyber Scam Money Laundering
The U.S. Department of Justice (DoJ) announced the seizure of a cloud computing account used by subsidiaries of the Cambodia-based HuiOne Group,…
Dawn of the Apex Agentic Adversary: AI-Driven Threats Compress Attack Timelines
The cybersecurity landscape is entering a new era where AI-powered agentic adversaries compress the time between vulnerability discovery and weaponization to near-instantaneous…
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks
Cybersecurity researchers at Novee Security have identified a critical exploitable pattern in CI/CD workflows, codenamed Cordyceps, that allows unauthenticated attackers to hijack…
Amadey and StealC Malware Network Disrupted: 27 Million Stolen Credentials Recovered
A coordinated international law enforcement operation, supported by private sector partners including Bitdefender, Bitsight, ESET, and Microsoft, has successfully dismantled the criminal…