Confluence to Cerber: Exploitation of CVE-2023-22518
On October 31, 2023, Atlassian published patches and an advisory for CVE-2023-22518, an improper authorization vulnerability affecting Confluence Data Center and Confluence Server. Later, on…
Month: April 2026
ai-agents – 28 Claude Code Subagents for Penetration Testing
A new open-source toolkit called pentest-ai-agents is redefining how security professionals leverage AI in penetration testing workflows, transforming Anthropic’s Claude Code into a fully specialized…
Nessus Agent Windows Flaw Enables SYSTEM-Level Code Execution
Tenable has disclosed a high-severity security vulnerability in its Nessus Agent software for Windows that could allow attackers to execute malicious code with full SYSTEM-level…
The AI criminal mastermind is already hiring on gig platforms
Labor-hire platforms let anyone with a credit card post a task and pay a stranger to complete it. The RentAHuman platform extends that model to…
Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code Execution
Ravie LakshmananApr 21, 2026Vulnerability / Artificial Intelligence Cybersecurity researchers have discovered a vulnerability in Google’s agentic integrated development environment (IDE), Antigravity, that could be exploited…
Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION
Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION Pierluigi Paganini April 26, 2026 A new round of the weekly Security Affairs newsletter…
AI Layoffs Aren’t About AI
Let me try to explain these AI layoffs. The issue is the vast difference in quality of employee between the top 10% and everyone else.…
From scepticism to concern: Mythos panic is slowly starting to reach China
In the third of a three-part series on Anthropic’s powerful Mythos AI model, we look at how China is responding to the growing threat of…
Autonome KI-Agenten: Strategien für die neue Bedrohungslage
Ein bereichsübergreifendes „Agentic Governance Council“ zu etablieren ist daher ein notwendiger strategischer Schritt. Dieses Gremium sollte die Verantwortung tragen und die strategische Führung übernehmen. Es…
Bitter Pill | Huntress
In a concerning development within the healthcare sector, Huntress has identified a series of unauthorized access that signifies internal reconnaissance and preparation for additional threat…
NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs
Ravie LakshmananApr 21, 2026Mobile Security / Artificial Intelligence Cybersecurity researchers have discovered a new iteration of an Android malware family called NGate that has been found to…
US judge dismisses Musk’s fraud claims in OpenAI case at his request
A US judge has dismissed Elon Musk’s fraud claims in his lawsuit accusing OpenAI and co-founder Sam Altman of betraying OpenAI’s original mission, but plans…