A new alert issued by the FBI warns of a surge in cyber-enabled cargo theft, with hackers targeting both brokers and carriers in sophisticated attacks. The FBI’s warning is not surprising. In late 2025, cybersecurity firm Proofpoint reported observing such… Read More "FBI Warns of Surge in Hacker-Enabled Cargo Theft"
Mythos in the hands of attackers threatens a storm beyond the power of security teams to weather. Claude Security is designed to counter this. Anthropic’s Mythos AI model will not be the only frontier model able to compress the time-to-exploit… Read More "Anthropic Unveils Claude Security to Counter AI-Powered Exploit Surge"
A critical remote code execution vulnerability was recently discovered by researchers in Gemini CLI, an open source AI agent designed to provide lightweight access to Gemini directly from a terminal. The vulnerability, patched by Google in both Gemini CLI and… Read More "Critical Gemini CLI Flaw Enabled Host Code Execution, Supply Chain Attacks"
A high-severity logic bug in the Linux kernel allows unprivileged attackers to write code to other files’ memory and obtain root shell, cybersecurity firm Theori reports. Tracked as CVE-2026-31431 (CVSS score of 7.8) and dubbed Copy Fail, the issue is… Read More "‘Copy Fail’ Logic Flaw in Linux Kernel Enables System Takeover"
Electric motorcycles from Zero Motorcycles and electric scooters from Yadea are affected by vulnerabilities that, if exploited, could have a physical security and safety impact. CISA recently published separate advisories for these vulnerabilities, and SecurityWeek has reached out to the… Read More "Electric Motorcycles and Scooters Face Hacking Risks to Security and Rider Safety"
Researchers have discovered a vulnerability that could allow threat actors to fingerprint Firefox users, even in Private Browsing mode. The issue also affects the Tor anonymity browser, which is based on Firefox. The vulnerability, tracked as CVE-2026-6770, is related to… Read More "Firefox Vulnerability Allows Tor User Fingerprinting"
An easily exploitable, high-severity vulnerability in the PackageKit cross-distro package management abstraction layer allows unprivileged users to install packages with root privileges. Tracked as CVE-2026-41651 (CVSS score of 8.1), the flaw is described as a time-of-check time-of-use (TOCTOU) race condition… Read More "Easily Exploitable ‘Pack2TheRoot’ Linux Vulnerability Leads to Root Access"
A recently disclosed privilege escalation vulnerability in Microsoft Defender has been exploited in the wild as a zero-day using publicly available proof-of-concept (PoC), Huntress warns. Patched on April 14, the issue is tracked as CVE-2026-33825 (CVSS score of 7.8). Microsoft… Read More "Recent Microsoft Defender Vulnerability Exploited as Zero-Day"
Mozilla says Anthropic’s new cybersecurity-focused Claude Mythos AI model has discovered 271 vulnerabilities in Firefox. The vulnerabilities, identified with an early version of Claude Mythos Preview, were patched in the popular web browser this week with the release of version… Read More "Claude Mythos Finds 271 Firefox Vulnerabilities"
Oracle on Tuesday announced the release of 481 new security patches as part of its April 2026 Critical Patch Update (CPU). Across the 28 product families that received security updates, more than 300 patches address vulnerabilities that are remotely exploitable… Read More "Oracle Patches 450 Vulnerabilities With April 2026 CPU"
