Geek Guy https://validator.w3.org/feed/docs/rss2.html Fortinet2Shell Vulnerability Lets Hackers Execute Code on FortiClient Systems Through Malicious Websites Anthropic Sets IPO Price Range at $70 to $78, Targets $1.4 Trillion Valuation TinstaPorn Android Malware Poses as Casino App to Collect User Data N-able Warns of Critical N-central Zero-Day Vulnerability Actively Exploited by Hackers N-able releases security hotfixes for zero-day vulnerabilities Rewriting less than 10 neurons in an LLM can turn it into a sleeper backdoor Muse sleep band users weren’t told their brain data was training AI Over 35,000 Grok-Built Apps Exposed Online, Some Leaking Confidential Data and Passwords BluePhishing Attack Abuses Microsoft Entra OAuth Consent to Create Hidden AI Agent Identities Windows Active Directory RCE and DoS Vulnerabilities Put Windows Systems at Risk We Built An Agent That Broke All of Our Security Rules. Here’s What We Learned. Rubrik enhances DevOps Protection to preserve legitimate work during recovery Researcher Finds 100-Plus Serious Flaws in UK Government Code eMudhra Revokes 8 More CAs It Previously Declared Unaffected by Key Compromise Claude Code’s ‘don’t ask again’ button has a secrets-spilling problem Researchers Uncover 45 AI Hacking Frameworks, With Hundreds of Attack Consoles Exposed on the Internet Microsoft Patch Tuesday fixes Outlook flaw already under attack Microsoft fixes audio issues caused by September security updates The bad news for Microsoft in the Blue Tsunami Microsoft researchers demonstrate hidden backdoor technique for AI agents Adobe opens Creative Cloud apps to third-party AI assistants Your new Android speed-typing superpower Hackers Advertise a $1,000 Gmail Tool That Allegedly Survives Password Resets CoreWeave Finds a Workaround to Capital Constraints—for Now NCSC-2026-0479 [1.00] [M/H] Kwetsbaarheden verholpen in Siemens producten CISA flags Cisco BroadWorks flaw as actively exploited in attacks OT Incidents Hit a Third of Industrial Organizations, SANS Finds LW ROUNDTABLE: Binance heist shows AI multiplies trust chains while handoffs go unguarded Ubuntu certificate revocation checks arrive in curl, OpenSSL is next American MSSP Company on Integrating Threat Intelligence to Scale Without Sacrificing Quality Ivanti Patches Critical SQL Injection Flaw Allowing Remote Code Execution Without Login Red Hat OpenShift 5 brings autonomous troubleshooting to hybrid clouds Corelight Warns AI Agents Can Silently Run Unreviewed Code With Privileged Access to Enterprise Networks Notion AI Data Breach Exposes Customer Chat Transcripts After Third-Party Fireworks AI Cyberattack Druva helps restore AI agents without rolling back entire environments Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday Fingerprint trains specialized models to detect distinct fraud types Microsoft fixes Exchange sign-ins broken by Windows Server updates Orca Security adds visibility into AI-generated code and agent risks Microsoft November Patch Tuesday: one exploited Outlook bug and 30 wormable flaws Why does old access outlive the job? T-Mobile for Business Expands TSD Reach With CableFinder Cribl Acquires Tero to Expand Observability Platform Obsidian expands AI agent security with runtime policy enforcement Railway Security Breach Exposes Customer API Keys, Database Passwords and Cloud Secrets What will it take to make VulnOps a reality? Microsoft Patches 1,259 Flaws, Including Exploited Outlook Bug That May Expose NTLMv2 Hashes Critical SAP PROXYGATE and ICM2SHELL Vulnerabilities Allow Server Takeover Without Authentication NCSC-2026-0478 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-central One in Three AI Suppliers Has Critical Unpatched Vulnerabilities, Black Kite Finds