IBM and Red Hat launch Lightwell to defend open-source code from AI attacks

Their plan to protect open-source projects from AI-discovered security holes has led to the launch of two commercial ...

Google pays $250K for Linux vulnerability allowing guest VM escapes

A Linux vulnerability that allows untrusted virtual machines to gain root access to host machines is one of two high-severity ...
Bleeping Computer

Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to developers and users of Paysafe, Skrill, and Neteller payment applications. The ...
The Hacker News

15-Year-Old GhostLock Flaw Enables Root and Container Escape on Most Linux Distros

Researchers at Nebula Security have disclosed GhostLock (CVE-2026-43499), a 15-year-old Linux kernel flaw that lets any ...

This latest frightening ransomware attack was orchestrated entirely by an LLM

A recent report from cloud security firm Sysdig details the capabilities of JadePuffer, which it says is the first ransomware ...
The Hacker News

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

CISA added four exploited flaws to KEV, covering Adobe ColdFusion, Joomla page builders, and Langflow ahead of July 10 fixes.
SecurityWeek

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws

Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known ...