Google released Chrome version 155 to address 247 security vulnerabilities, including four critical use-after-free bugs affecting Chromecast, Browser, Navigation, and Track components. These critical flaws are tracked as CVE-2026-106382, CVE-2026-106197, CVE-2026-106358, and CVE-2026-106347. The update also fixes 53 high-severity and numerous medium- and low-severity issues. No exploitation in the wild has been reported. The update is available for Windows, macOS, and Linux platforms.
A North Carolina musician was sentenced to 18 months in prison for orchestrating a $10 million streaming royalty fraud scheme involving major platforms like Spotify, Apple Music, Amazon Music, and YouTube Music. The fraud was conducted using AI bots to generate fake streams and collect royalties illegitimately.
Advantest Corporation experienced a ransomware attack earlier this year that resulted in the exposure of personally identifiable information of affected individuals. The company has notified those impacted by this data breach.
An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query on the affected product.
A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or an SQL query on the affected product.
Anthropic has introduced a revamped Cyber Verification Program (CVP) that consolidates previous offerings into a three-tier access system for its advanced AI models. The tiers—Defense Access, Red Team Access, and Specialized Access—offer varying levels of AI capabilities with corresponding verification and security controls. The program aims to balance enabling security research and preventing misuse by restricting certain harmful actions and requiring data retention for monitoring. The program is integrated across multiple cloud platforms with some features still rolling out. This initiative supports vetted security teams and organizations in safely leveraging AI for cybersecurity tasks.
This report discusses the emerging threat of autonomous AI agent swarms conducting cyber attacks on public infrastructure and organizations. These AI-driven attacks can rapidly execute complex campaigns involving social engineering, exploitation of unpatched vulnerabilities, and phishing at scale. While current public incidents resemble noisy penetration tests, future attacks may prioritize stealth and persistence, making detection and defense more challenging. The report emphasizes the need for organizations to prepare incident response plans, map attack paths, run AI-specific tabletop exercises, enforce strong multi-factor authentication, and enhance internal detection capabilities to build resilience against these evolving AI-powered threats.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sarah Giles Dynamic User Directory dynamic-user-directory allows Blind SQL Injection.This issue affects Dynamic User Directory: from n/a through 2.4.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in SERVIT Software Solutions affiliate-toolkit affiliate-toolkit-starter allows Blind SQL Injection.This issue affects affiliate-toolkit: from n/a through 3.9.1.
An Iranian state-aligned threat actor, CL-STA-1178, has been conducting the Blinder Tunnel campaign since November 2025, targeting Iraqi critical infrastructure by impersonating the Dubai Airports IT department. The campaign delivers trojanized coding challenges that deploy ShelbyLoader V2 malware through a multi-stage attack chain involving AppDomainManager hijacking and DLL sideloading. The attackers use GitHub API infrastructure for command-and-control communications, including repositories and issues as fallback channels. Operational security errors revealed links to a separate credential harvesting campaign targeting Israeli entities with conflict-themed Google Drive lures in mid-2026.
British online retailer ASOS confirmed a cyberattack involving the compromise of a third-party communication platform used to send notifications to users. Hackers sent rogue notifications to ASOS users' mobile apps, claiming full compromise of ASOS's Snowflake data platform instance and threatening data leaks. ASOS stated that basic user information such as names and contact details may have been accessed, but payment card information and passwords were not impacted. The company’s website and app operations remain unaffected. The incident was claimed by a hacking group named Xuanye Group, possibly a Chinese-speaking threat actor or a false flag. ASOS has restricted access to the compromised notification platform and is working with specialists and authorities. The exact initial access vector and details about the third-party platform remain undisclosed.
In September, an organization was targeted by the Akira ransomware, where attackers gained initial access via Remote Desktop Protocol (RDP). The adversary disabled antivirus protections on the compromised endpoint, used Rclone for data exfiltration, and employed a GOST tunneling tool to maintain persistence. After these preparatory steps, the ransomware payload was deployed. Forensic analysis identified key indicators of compromise including specific file paths, SHA256 hashes of malicious binaries, and the command and control (C2) server IP address used for tunnel communications.
Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label 'app=yunikorn' the checks limiting the user annotation content are not run. The label is used to identify the YuniKorn application itself in the deployments.
The bypass allows any user to specify an arbitrary user info annotation. The arbitrary user information could allow access to a queue that the user normally would not have access to. Quota usage for the queue might be impacted if the application runs in the incorrect queue. User based quota enforcement is also based on the user annotation. User quota tracking could be side stepped even if the application runs in the correct queue.
Users are recommended to upgrade to version 1.10.0, which fixes this issue.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weDevs Happy Addons for Elementor happy-elementor-addons allows Stored XSS.This issue affects Happy Addons for Elementor: from n/a through 3.50.0.
Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the server crashes if a membership record does not start with "CN=".
This only affects install that have the non default LDAP group provider configured.
Users are recommended to upgrade to version 1.10.0, which fixes this issue.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.6.2.
Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemonsets", "jobs", "cronjobs". The CREATE action correctly enforces the checks for all object types.
The bypass allows any user to specify an arbitrary user info annotation. The same bypass also allows changing the application ID for the workload. The combination of the two applied in one UPDATE could allow access to a queue that the user normally would not have access to. Quota usage for the queue might be impacted if the application runs in the incorrect queue. User based quota enforcement is also based on the user annotation. User quota tracking could be side stepped even if the application runs in the correct queue.
Users are recommended to upgrade to version 1.10.0, which fixes this issue.
