OpenAI says Codex Security found 11,000 high-impact bugs in a month
Flaws uncovered in proprietary and open-source projects In its first testing cycle, OpenAI said Codex Security scanned more than 1.2 million commits across external repositories,…
Month: March 2026
LABScon25 Replay | How to Bug Hotel Rooms v2.0
In this talk, Phobos Group’s Dan Tentler evolves his previous work on hotel room security by demonstrating a fully portable security system built on Home…
Destructive Malware Targeting Poland’s Energy Sector — Elastic Security Labs
Summary On December 29, 2025, a coordinated campaign of destructive cyberattacks targeted Poland’s energy infrastructure, affecting over 30 renewable energy facilities and a major combined…
Critical Nginx UI Vulnerabilities Allow Attacker to Download a Full System Backup
Nginx UI Vulnerabilities A newly discovered critical vulnerability in Nginx UI allows unauthenticated attackers to download and decrypt full system backups. Tracked as CVE-2026-27944, this…
Top 10 web hacking techniques of 2023 – nominations open
Update: The results are in! Check out the final top ten here or scroll down to view all nominations Over the last year, numerous security…
Vaultwarden Vulnerabilities Enable Privilege Escalation and Data Exposure
Two high-severity vulnerabilities have been discovered in Vaultwarden, a widely used alternative Bitwarden server implementation written in Rust. These security flaws, tracked as CVE-2026-27803 and…
AI Bot Hackerbot-Claw Targets Microsoft, DataDog and CNCF GitHub Repos
Cybersecurity researchers from Pillar Security have detailed a new threat named Hackerbot-Claw, aka Chaos Agent. This marks the first time an AI agent has been…
OpenWrt 25.12.0 ships with new package manager, built-in upgrade tool, support for 2200+ devices
OpenWrt 25.12.0 is now available for download. The release incorporates over 4,700 commits since branching from OpenWrt 24.10. Package manager changes One of the most…
DoJ Seizes $61 Million in Tether Linked to Pig Butchering Crypto Scams
Ravie LakshmananFeb 27, 2026Financial Crime / Social Engineering The U.S. Department of Justice (DoJ) this week announced the seizure of $61 million worth of Tether…
AI factory builder Nscale announces another $2bn of funding
Nscale, an artificial intelligence (AI) factory builder and key plank in the UK government’s AI growth strategy, has announced $2bn of C-series funding. The announcement…
Critical Nginx UI Vulnerability Exposes Server Backups and Sensitive Data – The Cyber Express
A newly disclosed vulnerability in Nginx UI, tracked as CVE-2026-27944, has raised major security concerns after researchers confirmed that attackers can download and decrypt server backups without…
Kids Internet and Digital Safety Act Gains Momentum in U.S. House – The Cyber Express
The debate over how to protect children online is once again at the center of U.S. policymaking. The Kids Internet and Digital Safety Act has…