A new Spectre v2 variant called Branch Target Reuse (BTR) can recover root password hashes from Intel Linux systems in just a few minutes by abusing stale branch-predictor state left behind after JIT code reuse. Researchers from VUSec and Scuola Superiore Sant’Anna demonstrated the attack against Linux cBPF, Firefox SpiderMonkey, and Oracle GraalVM, and Linux kernel fixes have already been merged for CVE-2026-64507 and CVE-2026-64508. #BTR #VUSec #SpiderMonkey #GraalVM #LinuxKernel #CVE-2026-64507 #CVE-2026-64508
Microsoft has begun rolling out the Windows 11 2026 Update (26H2), which is based on the same servicing branch as 24H2 and 25H2, so most users will see it as a small enablement update rather than a major OS overhaul. The update mainly activates features already delivered through monthly Windows Updates and resets support lifecycles, while devices running Windows 11 26H1 cannot upgrade directly to 26H2. #Windows11 #26H2 #26H1 #Microsoft
Two former U.S. Air Force members were sentenced for carrying out multi-year business email compromise and phishing schemes that stole credentials and rerouted corporate wire transfers. Their fraud helped divert more than $2.4 million from victims, with the Justice Department and FBI warning that BEC remains a major source of financial loss. #ChijiokeTimothyOdimegwu #HarafatMogaji #DoverAirForceBase #BusinessEmailCompromise
Attackers exploited Citrix NetScaler CVE-2026-88772 and CVE-2026-88771 zero-days to deploy web shells, tunneling malware, steal credentials, and move deeper into internal networks. Mandiant and GreyNoise say the campaign affected organizations across North America and Europe, with persistent post-exploitation tactics including root access abuse and the use of WHIPSHOT and SLAPSHOT. #Citrix #NetScaler #CVE-2026-88771 #CVE-2026-88772 #Mandiant #GreyNoise #WHIPSHOT #SLAPSHOT
The FBI is urging remaining ShinyHunters members to surrender after Dutch police arrested a 24-year-old alleged leader linked to the extortion group’s global cyberattacks. The group is accused of breaching more than 140 organizations, including the FBI itself, while targeting platforms like Salesforce, Snowflake, and Oracle PeopleSoft. #ShinyHunters #FBI #DutchNationalPolice #OraclePeopleSoft #Salesforce #Snowflake
Researchers from VUSec, Vrije Universiteit Amsterdam, and Scuola Superiore Sant’Anna disclosed Branch Target Reuse (BTR), a new Spectre v2 variant that affects Intel, AMD, and Arm CPUs. The attack can abuse JIT compilers in kernels, browsers, and runtimes to leak sensitive memory data, including the root password hash, with mitigations left…
DARPA selected Xint to use autonomous AI application security for deep analysis of messaging apps used across the Department of War, aiming to protect communications from external and foreign eavesdropping. The project builds on Xint’s AIxCC success and combines source-code review, binary reverse engineering, vulnerability triage, and patch generation for both…
OpenAI CEO Sam Altman unveiled new “Dots” AI agents at the company’s developer conference, highlighting always-on task automation and fresh product updates. The announcements came as OpenAI delayed another model over internal security concerns, even as Altman avoided addressing those risks on stage. #OpenAI #SamAltman #Dots #GPT-6.1Sol…
A threat actor calling itself ChimeraZ claims to be selling data allegedly stolen from KEL Group, a French construction and building-materials software company, and says the breach affected about 1.3 million people. The post advertises a large JSONL data set and a second archive of PDFs, while also claiming infrastructure access,…
A post attributed to “Syrv4x” claims to offer data from Laboratoire LCS in France for free, describing a 7 MB file with 42,495 rows and fields such as wearer ID, names, date of birth, order details, and lens type. The listing remains unverified, with the download hidden behind a reply requirement…
A post claims to offer a free dataset linked to SFR, a French telecommunications company, containing 15,818 records and a 13 MB file size. The advertised data includes customer contact details, order-related fields, and banking-related fields such as bank and rib, but the claim remains unverified. #SFR #Syrv4x #France…
A threat listing claims to offer 9,537 records tied to KRYS Group, a France-based optical retail and hearing care organization, with customer and appointment data in two JSONL files. The claim is unverified, but the samples suggest exposure of personal and contact details that could support phishing or impersonation. #KRYSGroup #Syrv4x…
LastPass has expanded Business Max with AI Monitoring & Protect and Web Monitoring & Protect to help organizations discover, govern, and secure employee use of AI tools, SaaS apps, and websites from its browser-native extension. The new capabilities add visibility, data-sharing warnings, category-based controls, and malicious site blocking to reduce exposure to risky AI use and web-based threats. #LastPass #BusinessMax #AIMonitoring #WebMonitoring
A widespread wave of exploitation is targeting vulnerable, internet-exposed Citrix NetScaler ADC and Gateway deployments after a proof-of-concept for CVE-2026-88771 was published. Researchers and vendors say attackers are using opportunistic scanning, log poisoning, and webshell deployment, with more than 100 victim organizations already being tracked. #Citrix #NetScalerADC #NetScalerGateway #CVE-2026-88771 #CVE-2026-88772
Authorities in the Netherlands arrested a 24-year-old man in Amsterdam accused of involvement in ShinyHunters, a prolific cybercrime group linked to major extortion campaigns and the recent attack on the FBI. The case marks a significant law-enforcement development as investigators continue to pursue members tied to more than 140 breaches and at least $70 million in extortion payments. #ShinyHunters #FBI #PepjinvanderStap