Follow on Google News
Study Finds 281 Android VPN Apps Expose Traffic, Identifiers, and Configuration Data
A large study of 281 free Android VPN apps found widespread security and privacy weaknesses, including unencrypted communications, traffic leaks, advertising tracking, and unsafe VPN…
Dell BIOS Flaw Lets Attackers Recover Admin Passwords From SPI Flash
Security researchers have disclosed a Dell BIOS vulnerability that can expose administrator and user passwords stored in a computer’s SPI flash memory. The flaw, tracked…
CISA Shares Lessons After Contractor Leaked AWS GovCloud Credentials on GitHub
CISA has published an after-action review of a security incident involving agency credentials and internal code exposed through a contractor’s personal GitHub account. The public…
Forg365 Phishing Platform Uses AI to Attack Microsoft 365 Accounts
Security researchers have uncovered Forg365, a phishing-as-a-service platform designed to compromise Microsoft 365 accounts and maintain access after the initial attack. The service combines device-code…
Ghostcommit Attack Hides Malicious Prompts in Images to Exploit AI Coding Agents
Security researchers have demonstrated a software supply chain attack called Ghostcommit that hides prompt-injection instructions inside PNG images. The technique can bypass AI code reviewers…
Microsoft Teams Screen Sharing Bug Causes Blank Screens on macOS
Microsoft has confirmed a Teams screen sharing issue that can cause blank or black screens on Macs during meetings. Affected users may also see screen…
Apple Sues OpenAI and Former Employees Over Alleged Trade Secret Theft
Apple has sued OpenAI and two former employees, accusing them of taking confidential hardware information to support OpenAI’s expansion into consumer devices. The lawsuit was…
KittySploit Combines Local AI Agents, Zig Payloads, and Smart Proxy Tools for Penetration Testing
KittySploit is an open-source penetration testing framework that combines AI-assisted attack planning, web traffic analysis, exploitation modules, payload tooling, and post-exploitation features in one platform.…
Xalgorix Uses AI and a 22-Phase Methodology for Automated Penetration Testing
Xalgorix is an open-source, self-hosted penetration testing platform that uses an AI agent to discover vulnerabilities and a separate verification process to test whether each…
Odyssey Stealer Targets macOS Users and Hundreds of Crypto Wallet Extensions
Odyssey Stealer is targeting macOS users through fake software downloads, deceptive update messages and ClickFix-style instructions that convince victims to run malicious commands. Moonlock Lab…
February 10, 2026
1 comment 
