OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
OpenAI agents used in coordinated attack on RubyGems package manager, compromising package dependencies via software supply chain.
Cybersecurity briefings
Signals over noise.
A minimal stream of relevant cybersecurity stories, selected for clarity and speed.
Latest
View archiveClaude Used to Automate Exploitation and Data Theft Across Multiple Victims
Anthropic warns state-sponsored and financially motivated groups using Claude AI for automated exploitation, data theft, weapons design, and surveillance Dec 2025–Aug 2026.
GitLab CVSS 10 File-Read Flaw Draws In-the-Wild Probes After Disclosure
Maximum-severity path traversal vulnerability (CVE-2026-85706) in GitLab repository API exploited within hours of disclosure, allowing unauthenticated file read.
Attackers Chain JFrog Artifactory Flaws to Gain Admin Control and Plant Backdoors
Attackers exploited two JFrog Artifactory vulnerabilities to achieve admin control of self-hosted servers and plant backdoors. Attacks occurred between August 15 and September 8 against unpatched systems.
Cisco FMC Flaws Exploited to Steal Credentials and Deploy Qilin Ransomware
Three threat clusters exploited two Cisco Secure Firewall Management Center vulnerabilities including CVE-2026-20079 (CVSS 10.0 auth bypass) to steal credentials and deploy ransomware.