ACTIVE THREATS: CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate • Microsoft Plugs Nearly 1,000 Security Holes • Your Critical Vulnerabilities Might Not Be Your Biggest Risk • Hackers abused Claude to extract secrets from 1.8M Android apps • Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks ACTIVE THREATS: CISA Calls for More Guidance, Less Spin, as Cyber Outages Escalate • Microsoft Plugs Nearly 1,000 Security Holes • Your Critical Vulnerabilities Might Not Be Your Biggest Risk • Hackers abused Claude to extract secrets from 1.8M Android apps • Anthropic Says Seven China-Based AI Labs Ran Industrial-Scale Claude Distillation Attacks
Latest cybersecurity vulnerabilities news, analysis, and intelligence.
Google patched CVE-2025-0971, a critical V8 type confusion bug actively exploited against Chrome users. Just visiting a compromised website enables remote code execution—update now. *(178 characters)*
Seven critical vulnerabilities in ThreadX OS affect 12 billion embedded devices in medical, aerospace, and industrial systems. The worst flaw enables unauthenticated remote code execution.