AI
Meta's Muse Faces Serious Zero-Day Allowing Privilege Takeover
Unpatched flaw reported in Meta's AI assistant Muse allows credential theft from device.
Tags: Vulnerability
Gadgets
Developer Abandons PS5 Linux Project After Sony Patches AI-Discovered Exploit
Developer halts effort to run Linux on PS5 after Sony patches AI-discovered hypervisor flaw.
Dev
Cisco ISE CVSS 10.0 Flaw Disclosed, Fix Released Amid Confirmed Exploitation
Cisco disclosed CVE-2026-76460, an authentication bypass in ISE. Rated CVSS 10.0 with confirmed exploitation. Immediate patching required.
Dev
BlueMoon Chains Chrome and Windows Attacks, Highlighting AI-Driven Exploitation
Proofpoint has confirmed BlueMoon chaining two Chromium flaws and one Windows flaw, spreading from TA412 to multiple groups.
Dev
Zero-Click Vulnerability in WeChat Calls Spreads Among Friends
Fixed the WeWorm vulnerability in WeChat calls. Explains no-answer takeover, spread among friends, and use of AI.
Dev
Critical Flaw in JFrog Artifactory Allows Authentication Bypass and Admin Takeover
JFrog Artifactory auth bypass CVE-2026-82329 exploited to generate admin tokens without authentication, raising supply chain concerns.
AI
AI Agent Illegally Accesses Gym Reservations, Exposing Authentication Vulnerabilities
An AI agent named OpenClaw, operated by an Australian developer, was found to have manipulated a gym’s reservation system. This raises new challenges for securing autonomous AI actions.
Dev
Vatican's Official Prayer App Leaks Data of 700,000 Users for Over Six Months
A critical security flaw was found in the Vatican's official prayer app, "Click to Pray." For over six months, the app's API exposed personal data of 700,000 users without any authentication mechanism.
Dev
Linux Kernel Red Scheduler 0-Day Exploit Enables Physical Memory R/W
Details of a Linux kernel 0-day vulnerability lurking in Red Hat’s network scheduler have been disclosed, revealing a sophisticated exploit chain that escalates from a limited Use-After-Free (UAF) vulnerability to physical memory read/write access and eventually to privilege escalation.
Internet Voices
Windows Defender Patch Leads to Disk Exhaustion Vulnerability
A zero-day patch for Windows Defender released by Microsoft has introduced a new issue, potentially allowing attackers to fill hard drives.
Dev
Epoll Vulnerability CVE-2026-46242 Missed by Mythos
A critical use-after-free vulnerability caused by a race condition has been discovered in the Linux kernel's epoll subsystem. While Anthropic's AI "Mythos" identified a separate bug in the same code area, it failed to detect this vulnerability.
Dev
Privilege Escalation Vulnerability in Microsoft Defender "RoguePlanet" Made Public
Microsoft has acknowledged the Defender vulnerability CVE-2026-50656, exploiting a race condition to gain System privileges. CVSS 7.8, PoC released. No patch provided yet.
Dev
Honda Civic Vulnerable to Evil Maid Attack: Code Execution Possible via USB Physical Access
Honda Civic's Android software packages signed with AOSP test keys allow arbitrary code execution via USB physical access, making it a target for Evil Maid attacks.
Dev
Nearly 1 Million Passports and IDs Left Exposed: Vulnerability in Cannabis Club Management System
A critical vulnerability found in "Cannabis Club Systems," software for Spanish cannabis clubs, leaves nearly 1 million photo IDs unprotected on a public URL with no password.