Security insights, vulnerability roundups, and updates from the Agent Breach team.
One digest email when we publish new security articles (TL;DR plus links to read more). Unsubscribe anytime from the message footer. See our Privacy Policy.
Cybercriminals are using infostealer malware to harvest AI platform session tokens, enabling unauthorized access even when MFA is enabled. These replayable tokens bypass traditional authentication safeguards.
Read moreMultiple espionage groups used a new exploit kit chaining Windows and Chrome flaws. The attacks highlight coordinated targeting of high-value systems.
Read moreMultiple high-severity flaws in FFmpeg affect Ubuntu systems, potentially allowing remote code execution and denial of service.
Read moreThe DOJ disrupted an online scam marketplace linked to Chinese organized crime, seizing Telegram channels and crypto assets. The operation targeted 13 scam compounds in Madagascar.
Read moreA recently patched Vim vulnerability in Ubuntu 26.04 LTS could allow attackers to execute arbitrary code through malicious tags files. Organizations should update immediately to mitigate potential exploitation.
Read moreA vulnerability in curl could lead to incorrect client certificate usage when reusing connections. Ubuntu 26.04 LTS users should apply the latest security update immediately.
Read moreMultiple vulnerabilities in ImageMagick affect several Ubuntu LTS versions, potentially enabling denial of service, remote code execution, and data exposure.
Read moreA pre-authentication remote code execution flaw in N-able N-central has been added to CISA's KEV catalog. Federal agencies must patch by September 11, 2026.
Read moreMicrosoft addressed a record-breaking 974 vulnerabilities in its latest Patch Tuesday release. Two of these flaws are confirmed to be actively exploited in real-world attacks.
Read moreAttackers are leveraging compromised ConnectWise ScreenConnect clients to spread malware automatically to new connections. The campaign uses diverse entry points including tech support scams and phishing.
Read more