Rethinking MDR: Why AI SOCs Are Replacing Traditional Managed Detection and Response
For most of the past decade, Managed Detection and Response (MDR) was the answer to staffing and alert fatigue challenges. However, as…
Tag: CVE-2026-11645
Agentjacking Attack Tricks AI Coding Agents Into Running Malicious Code
Cybersecurity researchers at Tenet Security have identified a new class of attack called Agentjacking, which tricks AI coding agents into executing arbitrary…
China-Linked Velvet Ant Backdoored Linux PAM and OpenSSH for Nearly a Decade
Sygnia, tracking the China-nexus group as Velvet Ant, discovered that the group backdoored Linux PAM and OpenSSH components to maintain persistent access…
Google Sues Chinese Smishing Network Using Gemini AI for Phishing
Google has filed a lawsuit against a Chinese cybercrime network accused of using its Gemini AI agent to power a phishing-as-a-service (PhaaS)…
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF Rootkit
Attackers hijacked over 400 packages in the Arch User Repository (AUR) by adopting orphaned projects and modifying build scripts to deploy a…
U.S. Orders Anthropic to Suspend Claude Fable 5 and Mythos 5 Access for Foreign Nationals Over National Security Concerns
The U.S. government has ordered Anthropic to suspend access to its most advanced AI models, Claude Fable 5 and Mythos 5, for…
Critical Splunk Enterprise Flaw CVE-2026-20253 Allows Unauthenticated RCE via PostgreSQL Sidecar
Splunk has released urgent security updates to address a critical vulnerability in Splunk Enterprise, tracked as CVE-2026-20253, with a CVSS score of…
Palo Alto Networks Warns of Active Exploitation of PAN-OS GlobalProtect VPN Flaw CVE-2026-0257
Palo Alto Networks has issued an urgent warning regarding active exploitation of a recently disclosed PAN-OS vulnerability, CVE-2026-0257 (CVSS score: 7.8), which…
Sniper Dz PhaaS Campaign Targets MENA Users via Fake Facebook Offers and Browser Alerts
Cybersecurity researchers at Group-IB have uncovered a fraudulent campaign targeting users across the Middle East and North Africa (MENA) region. The operation,…
Supply Chain Attack Hits Three WordPress Plugins: PushEngage, OptinMonster, TrustPulse Backdoored
An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way…