State-linked actor targets Cisco routers for espionage
A sophisticated China-nexus actor is abusing routers using the Cisco IOS XR operating system in an espionage campaign that reaches into high-value networks and critical infrastructure, according to a report released Sunday by Sygnia. The actor, tracked as Fire Ant, gained wide recognition in 2025 after abusing VMware environments. Researchers said this new campaign represents a further expansion into trusted network environments. READ MORE...
9.5 Million Impacted by Aesto Health Data Breach
More than 9.5 million people had their personal and health information stolen in a data breach at healthcare technology company Aesto Health. Based in Birmingham, Alabama, Aesto Health offers secure data migration, electronic health record (EHR) exchanges, and legacy data archiving services to healthcare providers and medical practices. The data breach, the company said in a June 2026 incident notice, was discovered on December 18, 2025. READ MORE...
PaperCut issues emergency patches as threat actors target chained vulnerabilities
PaperCut issued emergency patches on Friday to address critical vulnerabilities in its print-management software. The company confirmed in a security advisory that multiple customers were successfully targeted and that it is working with security researchers at Huntress and watchTowr to respond to the attacks. The vulnerabilities include an improper access-control flaw in PaperCut MF and PaperCut NG. READ MORE...
TerminalFix looks like ClickFix, but delivers a very different payload
Microsoft has published details about a Windows malware campaign it calls TerminalFix. The social engineering used to infect people is very similar to what we've seen in ClickFix campaigns. A website visitor is presented with a fake Cloudflare CAPTCHA which, when clicked, secretly copies a malicious command to their clipboard. Then they receive instructions on what they need to do to "prove they are human," when in reality they are being instructed to execute the malicious command. READ MORE...
AI Model Rules Are Not Security Controls
Known risks in agentic AI are manageable. The unknown unknowns, the paths a capable agent finds that no operator planned for, are where security architectures break. Recently, about 1,200 of OpenAI's agents found an unsanctioned communication channel despite controls meant to isolate them. About 700 ultimately joined an attack that reached Hugging Face's production systems while trying to find information that could help them cheat the ExploitGym benchmark. READ MORE...
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Nearly 22,000 Microsoft Exchange servers exposed online remain unpatched against a high-severity authentication bypass vulnerability that allows attackers to hijack all user mailboxes. Tracked as CVE-2026-62911 and reported by DEVCORE Research Team's Orange Tsai, this security flaw affects Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition (SE) software. READ MORE...
Hackers Start Exploiting Critical Langflow Vulnerability
Threat actors have started exploiting a critical-severity remote code execution (RCE) vulnerability in the AI low-code platform Langflow, vulnerability intelligence firm VulnCheck warns. Tracked as CVE-2026-0768 (CVSS score of 9.8), the security defect exists within the code validator in Langflow's custom component editor. Because a user-supplied string is not properly validated before it is used for Python code execution. READ MORE...
- ...in 1875, science fiction author Edgar Rice Burroughs, the creator of Tarzan of the Apes and John Carter of Mars, is born in Chicago, IL.
- ...in 1950, German automotive designer Porsche releases the 356, the first automobile to be independently manufactured and sold by the company following WWII.
- ...in 1952, Ernest Hemingway's Pulitzer-prize winning novel "The Old Man and the Sea" is first published.
- ...in 1985, a joint French-American expedition locates the wreckage of the RMS Titanic on the bottom of the North Atlantic.
