https://threatvectr.com/story/a-rails-bug-lets-strangers-read-your-servers-secrets-through-a-photo-upload ThreatVectr en 2026-07-29T18:48:00.273Z A Rails Bug Lets Strangers Read Your Server's Secrets Through a Photo Upload https://threatvectr.com/story/the-security-scanners-protecting-your-code-could-be-the-way-hackers-get-in ThreatVectr en 2026-07-29T18:34:00.028Z The Security Scanners Protecting Your Code Could Be the Way Hackers Get In https://threatvectr.com/story/an-ai-went-rogue-during-a-test-and-hacked-another-company-heres-what-that-means ThreatVectr en 2026-07-29T18:33:00.922Z An AI Went Rogue During a Test and Hacked Another Company. Here's What That Means. https://threatvectr.com/story/shinyhunters-are-phoning-hospital-help-desks-health-isac-sounds-the-alarm ThreatVectr en 2026-07-29T18:19:00.651Z ShinyHunters Are Phoning Hospital Help Desks: Health-ISAC Sounds the Alarm https://threatvectr.com/story/the-rufroot-flaw-why-patching-alone-wont-fix-this-ai-security-hole ThreatVectr en 2026-07-29T16:29:01.040Z The 'RufRoot' Flaw: Why Patching Alone Won't Fix This AI Security Hole https://threatvectr.com/story/critical-flaw-in-ruflo-ai-harness-lets-anyone-run-commands-on-your-server ThreatVectr en 2026-07-29T16:00:00.421Z Critical Flaw in Ruflo AI Harness Lets Anyone Run Commands on Your Server https://threatvectr.com/story/broadcom-patches-three-critical-vmware-bugs-including-a-vcenter-login-bypass ThreatVectr en 2026-07-29T15:58:00.203Z Broadcom Patches Three Critical VMware Bugs, Including a vCenter Login Bypass https://threatvectr.com/story/fake-russian-company-websites-ran-a-nine-year-scam-on-foreign-buyers ThreatVectr en 2026-07-29T15:08:00.283Z Fake Russian company websites ran a nine-year scam on foreign buyers https://threatvectr.com/story/us-and-allies-rewrite-the-software-ingredients-list-rulebook-for-2026 ThreatVectr en 2026-07-29T15:03:00.934Z US and allies rewrite the software 'ingredients list' rulebook for 2026 https://threatvectr.com/story/the-fcc-just-banned-chinese-humanoid-robots-here-is-what-that-actually-means ThreatVectr en 2026-07-29T14:53:00.206Z The FCC Just Banned Chinese Humanoid Robots. Here Is What That Actually Means. https://threatvectr.com/story/ai-agents-with-too-many-keys-why-permissions-are-the-new-identity-problem ThreatVectr en 2026-07-29T14:27:00.317Z AI agents with too many keys: why permissions are the new identity problem https://threatvectr.com/story/windows-11-gets-a-42-fix-preview-update-with-quieter-alerts-and-better-voice-con ThreatVectr en 2026-07-29T14:12:00.246Z Windows 11 gets a 42-fix preview update with quieter alerts and better voice control https://threatvectr.com/story/mate-security-pulls-in-dollar35-million-to-build-an-ai-powered-cyber-defence-sys ThreatVectr en 2026-07-29T13:07:00.461Z Mate Security Pulls In $35 Million to Build an AI-Powered Cyber Defence System That Learns on the Job https://threatvectr.com/story/nearly-three-in-four-companies-admit-they-arent-ready-for-a-serious-cyberattack ThreatVectr en 2026-07-29T13:00:00.986Z Nearly Three in Four Companies Admit They Aren't Ready for a Serious Cyberattack https://threatvectr.com/story/one-click-on-a-bad-web-page-was-enough-to-break-firefox-and-tor ThreatVectr en 2026-07-29T12:49:00.108Z One Click on a Bad Web Page Was Enough to Break Firefox and Tor https://threatvectr.com/story/threatlocker-raises-dollar190-million-to-expand-its-block-everything-first-secur ThreatVectr en 2026-07-29T12:45:00.861Z ThreatLocker Raises $190 Million to Expand Its Block-Everything-First Security Model https://threatvectr.com/story/ai-is-shrinking-the-time-between-bug-and-break-in-playbooks-havent-caught-up ThreatVectr en 2026-07-29T12:44:00.751Z AI Is Shrinking the Time Between Bug and Break-In. Playbooks Haven't Caught Up. https://threatvectr.com/story/broadcom-patches-critical-vm-escape-flaw-in-vmware-esxi-plus-four-more-vulnerabi ThreatVectr en 2026-07-29T12:07:00.063Z Broadcom Patches Critical 'VM Escape' Flaw in VMware ESXi, Plus Four More Vulnerabilities https://threatvectr.com/story/refurbished-asus-chromebook-cm30-drops-to-dollar145-and-shoppers-should-read-the ThreatVectr en 2026-07-29T11:49:00.731Z Refurbished ASUS Chromebook CM30 drops to $145, and shoppers should read the fine print https://threatvectr.com/story/russia-charges-telegrams-pavel-durov-with-aiding-terrorism ThreatVectr en 2026-07-29T11:29:00.327Z Russia Charges Telegram's Pavel Durov With Aiding Terrorism https://threatvectr.com/story/us-and-australia-publish-joint-playbook-for-cutting-critical-infrastructure-off- ThreatVectr en 2026-07-29T11:18:00.485Z US and Australia Publish Joint Playbook for Cutting Critical Infrastructure Off From Cyber Attack https://threatvectr.com/story/criminals-are-hijacking-cargo-trucks-with-laptops-not-crowbars ThreatVectr en 2026-07-29T10:34:00.655Z Criminals Are Hijacking Cargo Trucks With Laptops, Not Crowbars https://threatvectr.com/story/gitea-patches-critical-flaw-that-lets-repo-users-run-shell-commands ThreatVectr en 2026-07-29T09:40:00.736Z Gitea Patches Critical Flaw That Lets Repo Users Run Shell Commands https://threatvectr.com/story/the-us-government-just-changed-how-agencies-must-fix-security-flaws-it-is-not-en ThreatVectr en 2026-07-29T09:26:00.441Z The US Government Just Changed How Agencies Must Fix Security Flaws. It Is Not Enough. https://threatvectr.com/story/spur-intelligence-raises-dollar200-million-to-unmask-hidden-internet-traffic ThreatVectr en 2026-07-29T09:25:00.318Z Spur Intelligence Raises $200 Million to Unmask Hidden Internet Traffic https://threatvectr.com/story/the-four-ways-criminals-beat-multi-factor-authentication-and-what-you-can-do-abo ThreatVectr en 2026-07-29T08:36:00.245Z The Four Ways Criminals Beat Multi-Factor Authentication (And What You Can Do About It) https://threatvectr.com/story/flying-eagle-android-spyware-kit-leaks-onto-telegram-traced-to-170-servers ThreatVectr en 2026-07-29T08:20:00.963Z Flying Eagle Android Spyware Kit Leaks Onto Telegram, Traced to 170 Servers https://threatvectr.com/story/more-than-30-minnesota-water-utilities-hit-in-coordinated-cyberattack ThreatVectr en 2026-07-29T08:15:00.520Z More Than 30 Minnesota Water Utilities Hit in Coordinated Cyberattack https://threatvectr.com/story/ransomware-gangs-are-going-after-vpns-and-an-ai-just-ran-its-own-attack ThreatVectr en 2026-07-29T08:04:00.515Z Ransomware gangs are going after VPNs, and an AI just ran its own attack https://threatvectr.com/story/booby-trapped-joyfill-npm-packages-hide-a-remote-control-trojan ThreatVectr en 2026-07-29T04:54:00.351Z Booby-trapped @joyfill npm packages hide a remote-control trojan https://threatvectr.com/story/fortinet-unveils-fortigate-1200g-firewall-with-built-in-sase-enforcement-for-on- ThreatVectr en 2026-07-29T02:01:01.000Z Fortinet unveils FortiGate 1200G firewall with built-in SASE enforcement for on-premises sites https://threatvectr.com/story/your-security-team-is-flying-blind-on-ai-here-is-why ThreatVectr en 2026-07-29T01:26:00.268Z Your Security Team Is Flying Blind on AI. Here Is Why. https://threatvectr.com/story/matched-manipulated-blackmailed-how-sextortion-scams-target-young-men ThreatVectr en 2026-07-29T00:31:00.806Z Matched, Manipulated, Blackmailed: How Sextortion Scams Target Young Men https://threatvectr.com/story/fake-spotify-payment-emails-are-stealing-card-details-from-real-subscribers ThreatVectr en 2026-07-29T00:27:00.413Z Fake Spotify Payment Emails Are Stealing Card Details From Real Subscribers https://threatvectr.com/story/764-the-online-network-grooming-children-into-violence ThreatVectr en 2026-07-29T00:17:00.549Z 764: The Online Network Grooming Children Into Violence https://threatvectr.com/story/the-ghost-credentials-problem-how-forgotten-digital-keys-are-leaving-cloud-syste ThreatVectr en 2026-07-28T22:39:00.265Z The 'Ghost Credentials' Problem: How Forgotten Digital Keys Are Leaving Cloud Systems Wide Open https://threatvectr.com/story/cubepilot-drone-maker-hijacked-at-the-dns-level-passwords-and-firmware-in-doubt ThreatVectr en 2026-07-28T21:55:00.498Z CubePilot Drone Maker Hijacked at the DNS Level, Passwords and Firmware in Doubt https://threatvectr.com/story/openais-ai-systems-broke-out-of-their-test-environment-and-hacked-hugging-face ThreatVectr en 2026-07-28T21:40:00.209Z OpenAI's AI Systems Broke Out of Their Test Environment and Hacked Hugging Face https://threatvectr.com/story/researchers-want-to-read-an-ais-mind-before-it-does-something-dangerous ThreatVectr en 2026-07-28T21:28:00.214Z Researchers Want to Read an AI's Mind Before It Does Something Dangerous https://threatvectr.com/story/anthropics-claude-cracks-a-post-quantum-signature-scheme-in-under-four-hours ThreatVectr en 2026-07-28T19:24:00.594Z Anthropic's Claude Cracks a Post-Quantum Signature Scheme in Under Four Hours https://threatvectr.com/story/tengu-botnet-turns-linux-devices-against-their-own-defenders ThreatVectr en 2026-07-28T15:54:00.967Z Tengu Botnet Turns Linux Devices Against Their Own Defenders https://threatvectr.com/story/siemens-flags-hundreds-of-linux-flaws-in-its-s7-1500-mfp-factory-controllers ThreatVectr en 2026-07-28T15:33:00.223Z Siemens flags hundreds of Linux flaws in its S7-1500 MFP factory controllers https://threatvectr.com/story/us-and-australian-agencies-publish-playbook-for-cutting-critical-systems-off-in- ThreatVectr en 2026-07-28T15:23:00.441Z US and Australian agencies publish playbook for cutting critical systems off in a crisis https://threatvectr.com/story/cyera-buys-oasis-security-for-dollar1-billion-to-lock-down-ai-agents ThreatVectr en 2026-07-28T15:11:00.504Z Cyera Buys Oasis Security for $1 Billion to Lock Down AI Agents https://threatvectr.com/story/apple-pushes-fixes-for-hundreds-of-security-flaws-across-iphones-macs-and-more ThreatVectr en 2026-07-28T14:51:00.833Z Apple Pushes Fixes for Hundreds of Security Flaws Across iPhones, Macs, and More https://threatvectr.com/story/sso-is-the-new-skeleton-key-criminals-have-noticed ThreatVectr en 2026-07-28T14:34:00.429Z SSO Is the New Skeleton Key. Criminals Have Noticed. https://threatvectr.com/story/openwrt-ships-emergency-fix-for-critical-router-flaw-that-hands-attackers-full-c ThreatVectr en 2026-07-28T14:14:00.783Z OpenWrt Ships Emergency Fix for Critical Router Flaw That Hands Attackers Full Control https://threatvectr.com/story/frenos-raises-dollar152-million-more-to-test-factory-and-power-grid-security-wit ThreatVectr en 2026-07-28T13:34:00.546Z Frenos Raises $1.52 Million More to Test Factory and Power-Grid Security Without Touching the Real Thing https://threatvectr.com/story/infoblox-wants-to-find-your-exposed-assets-before-hackers-do ThreatVectr en 2026-07-28T13:22:00.545Z Infoblox Wants to Find Your Exposed Assets Before Hackers Do https://threatvectr.com/story/iran-linked-hackers-deploy-nightledger-backdoor-against-middle-east-africa-targe ThreatVectr en 2026-07-28T13:09:00.440Z Iran-Linked Hackers Deploy 'NightLedger' Backdoor Against Middle East, Africa Targets https://threatvectr.com/story/the-man-who-helped-build-the-ciso-role-explains-what-that-job-actually-takes ThreatVectr en 2026-07-28T12:52:00.058Z The Man Who Helped Build the CISO Role Explains What That Job Actually Takes https://threatvectr.com/story/changing-your-password-no-longer-kicks-hackers-out ThreatVectr en 2026-07-28T12:45:50.854Z Changing Your Password No Longer Kicks Hackers Out https://threatvectr.com/story/a-20-year-old-flaw-is-leaking-passwords-from-24000-servers-online ThreatVectr en 2026-07-28T12:34:00.516Z A 20-year-old flaw is leaking passwords from 24,000 servers online https://threatvectr.com/story/every-ai-browser-on-the-market-can-be-hacked-researchers-warn ThreatVectr en 2026-07-28T12:31:00.263Z Every AI Browser on the Market Can Be Hacked, Researchers Warn https://threatvectr.com/story/act-security-aims-to-tackle-cloud-vulnerability-challenges-with-dollar60-million ThreatVectr en 2026-07-28T11:35:00.651Z Act Security Aims to Tackle Cloud Vulnerability Challenges with $60 Million in Funding https://threatvectr.com/story/from-breaking-in-to-shutting-hackers-out-the-two-lives-of-tal-kollander ThreatVectr en 2026-07-28T11:21:00.498Z From Breaking In to Shutting Hackers Out: The Two Lives of Tal Kollander https://threatvectr.com/story/hush-security-raises-dollar30-million-to-put-ai-agents-under-proper-control ThreatVectr en 2026-07-28T10:45:00.623Z Hush Security Raises $30 Million to Put AI Agents Under Proper Control https://threatvectr.com/story/researcher-publishes-linux-kernel-root-exploit-built-with-ai-help ThreatVectr en 2026-07-28T09:47:00.753Z Researcher Publishes Linux Kernel Root Exploit Built With AI Help https://threatvectr.com/story/jetbrains-patches-critical-teamcity-flaw-that-let-attackers-run-commands-without ThreatVectr en 2026-07-28T09:47:00.709Z JetBrains Patches Critical TeamCity Flaw That Let Attackers Run Commands Without Logging In https://threatvectr.com/story/your-ai-safety-certificate-is-worthless-the-moment-the-agent-goes-live ThreatVectr en 2026-07-28T09:35:00.368Z Your AI Safety Certificate Is Worthless the Moment the Agent Goes Live https://threatvectr.com/story/pear-ransomware-crew-claims-126-million-record-breach-at-georgia-billing-firm-mc ThreatVectr en 2026-07-28T09:29:01.016Z PEAR ransomware crew claims 1.26 million-record breach at Georgia billing firm MCBS https://threatvectr.com/story/google-gives-hackers-new-names-here-is-why-that-matters ThreatVectr en 2026-07-28T08:56:00.892Z Google Gives Hackers New Names, Here Is Why That Matters https://threatvectr.com/story/microsoft-debuts-its-first-cybersecurity-only-ai-model-inside-mdash ThreatVectr en 2026-07-28T06:46:00.331Z Microsoft Debuts Its First Cybersecurity-Only AI Model Inside MDASH https://threatvectr.com/story/ai-smart-glasses-are-walking-into-your-office-nobody-knows-how-to-stop-them ThreatVectr en 2026-07-28T03:51:00.827Z AI Smart Glasses Are Walking Into Your Office. Nobody Knows How to Stop Them. https://threatvectr.com/story/microsofts-new-ai-security-service-can-find-bugs-simulate-attacks-and-write-patc ThreatVectr en 2026-07-28T02:39:00.422Z Microsoft's New AI Security Service Can Find Bugs, Simulate Attacks and Write Patches, All in Minutes https://threatvectr.com/story/the-man-who-meets-you-at-your-worst-inside-melbourne-airports-only-chaplain ThreatVectr en 2026-07-28T00:28:00.257Z The Man Who Meets You at Your Worst: Inside Melbourne Airport's Only Chaplain https://threatvectr.com/story/chatgpt-broke-out-of-its-test-cage-and-hacked-hugging-face-now-everyone-has-ques ThreatVectr en 2026-07-28T00:25:01.078Z ChatGPT Broke Out of Its Test Cage and Hacked Hugging Face. Now Everyone Has Questions. https://threatvectr.com/story/arista-rushes-fix-for-velocloud-flaw-already-being-used-in-attacks ThreatVectr en 2026-07-27T23:19:00.894Z Arista rushes fix for VeloCloud flaw already being used in attacks https://threatvectr.com/story/two-cloud-giants-two-flaws-zero-bug-bounties-the-confused-deputy-problem-that-wo ThreatVectr en 2026-07-27T21:57:00.612Z Two Cloud Giants, Two Flaws, Zero Bug Bounties: The 'Confused Deputy' Problem That Won't Go Away https://threatvectr.com/story/how-the-fbi-took-down-lockbit-by-destroying-the-one-thing-criminals-cant-easily- ThreatVectr en 2026-07-27T21:12:00.147Z How the FBI Took Down LockBit by Destroying the One Thing Criminals Can't Easily Replace: Trust https://threatvectr.com/story/the-cheapest-way-to-beat-an-ai-security-system-is-to-read-its-rulebook ThreatVectr en 2026-07-27T19:24:00.362Z The Cheapest Way to Beat an AI Security System Is to Read Its Rulebook