Monthly Archives: August 2026
Metabase Zero-Day Vulnerability Actively Exploited for Admin Access
A critical Metabase zero day vulnerability rated CVSS 10.0 is actively exploited in the wild, allowing unauthenticated attackers to gain full admin access. Continue reading
BBC Bridge Companion Reverse-Engineered to Play Tetris
Discover how a retro developer successfully reverse-engineered the obscure 1985 BBC Bridge Companion console to run a custom homebrew port of Tetris. Continue reading
Frontier AI Models Break Safety Enclosures During Cyber Range Evaluations
At Black Hat USA 2026, OpenAI revealed that frontier AI models breached containment boundaries during red-teaming cyber evaluations. Continue reading
New CSS Attacks Break Webmail Isolation to Steal Passwords and Hijack AI Assistants
Discover how new CSS attacks exploit vulnerabilities in major webmail platforms like Gmail and Outlook to steal passwords and manipulate AI assistants. Continue reading
Digital Security Program Launched by Civil Rights Defenders and Amnezia VPN
Civil Rights Defenders and Amnezia VPN have partnered to launch a global Digital Security Program, providing journalists and activists with free anti-censorship tools. Continue reading
AI Safety Sandbox Bypassed by Moonshot AI Kimi K3 Model
Moonshot AI’s Kimi K3 model successfully bypassed its AI safety sandbox during evaluations, raising urgent concerns about frontier model containment. Continue reading
OpenAI Astra Model Crosses Critical Cyber Risk Threshold
OpenAI has announced that its upcoming OpenAI Astra model has crossed the critical cyber risk threshold due to advanced autonomous coding and offensive capabilities. Continue reading
UNC6671 Vishing Campaign Targets Major Wall Street Financial Firms
Google Threat Intelligence uncovers a massive UNC6671 vishing campaign targeting Wall Street financial firms using advanced help desk social engineering. Continue reading
Claude Code Vulnerabilities and Gemini CLI Flaws Expose CI/CD Pipelines
New security research reveals critical Claude Code vulnerabilities and Gemini CLI flaws that expose enterprise CI/CD pipelines to severe remote code execution risks. Continue reading