On the NSA’s Supercomputer from the 1960s Really interesting story about Harvest, a specialized code breaking computer built in the 1960s by IBM for the NSA. Tags: history of computing , history of …
AI Security Roundup
Daily AI security roundup covering malware, vulnerabilities, defensive research, cloud risk, and incident response signals from trusted technical sources.
25 Years of Mass Surveillance Is Enough This essay was written with Cindy Cohn, and originally appeared in Lawfare . One of the many legacies of the terrorist attacks of Sept. 11 is the …
** The Hacker News ** Sep 16, 2026 Threat Intelligence / Security Validation A leaked credential shows up in a criminal marketplace, or a vulnerability gets a disclosure advisory, and either one can …
** Ravie Lakshmanan ** Sep 16, 2026 Vulnerability / Mobile Security Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem has come under exploitation in the wild. The …
Fake CAPTCHA Scams New variant of an old scam: Use the framing of a CAPTCHA to get an unsuspecting user to download and run a malicious program. Tags: captchas , scams Posted on September 16, 2026 at …
ai-security
EN
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can't Install Fix
Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level of access on a Mac, software company JFrog said this week. The attack needs code already …
N0va is targeting organizations across North America and Europe with phishing campaigns that impersonate trusted services and abuse legitimate authentication flows. Successful attacks can give threat …
ai-security
EN
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
** Swati Khandelwal ** Sep 16, 2026 Artificial Intelligence / Software Security Mandiant says an attacker hijacked an active AI coding-assistant session at an unnamed software-as-a-service provider …
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle , Hacking Cat , and Toy Ghouls , according to multiple reports from Kaspersky. The …
ai-security
EN
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, …
ai-security
EN
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
** Ravie Lakshmanan ** Sep 16, 2026 Vulnerability / Web Security A critical security flaw in Issabel Framework , a web-based framework for the open-source unified communications PBX software, has come …
[This is a Guest Diary by Frank Igbokwe, an ISC intern as part of the SANS.edu BACS program] Honeypot-Omaha is a DShied Sensor located at the Internet Storm Center (ISC) that is set up as a decoy for …
ai-security
EN
ISC Stormcast For Friday, September 4th, 2026 https://isc.sans.edu/podcastdetail/10082, (Fri, Sep 4th)
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
ai-security
EN
ISC Stormcast For Tuesday, September 8th, 2026 https://isc.sans.edu/podcastdetail/10084, (Tue, Sep 8th)
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
Internet Storm Center Sign In Sign Up Handler on Duty: Johannes Ullrich Threat Level: green Homepage Diaries Podcasts Jobs Data TCP/UDP Port Activity Port Trends SSH/Telnet Scanning Activity Weblogs …
ai-security
EN
ISC Stormcast For Wednesday, September 9th, 2026 https://isc.sans.edu/podcastdetail/10086, (Wed, Sep 9th)
ISC Stormcast For Wednesday, September 9th, 2026 <https://isc.sans.edu/podcastdetail/10086>
About a week ago, Proxmox published an advisory revealing a vulnerability in older versions of Proxmox VE, its flagship Virtual Environment product. The vulnerability only affects version 7, which has …
As part of Patch the Planet , we received preview access to GPT 5.6-Cyber with a simple task: evaluate its cyber capabilities. Recent events inspired me to give it a challenge to work through: escape …
Fermat famously claimed to have a “truly marvelous proof” of his Last Theorem , but he never wrote it down, insisting the margin of his page was too narrow to contain it. A few centuries later, …
Many security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: …
Authorities in Australia have arrested two men believed to be members of TeamPCP , a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply …
Using a VM to Contain an AI Agent It won’t work : > My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing …
Security Vulnerability in a Voting System It’s a vulnerability that allows someone to recover the order of ballots cast, newly exploited with AI tools. > Nearly four years since the original …