Unit 42 detailed "Agent Session Smuggling," where a malicious agent injects hidden commands to coerce client AIs into unauthorized actions, like buying stock.

A developer ported the Linux kernel to WebAssembly (WASM), allowing it to run in a web browser. The experimental build is a proof of concept for WASM's potential.

The creator of the infamous ZeroAccess botnet has resurfaced, transforming into a legitimate dev and publishing the YDbg kernel debugger—now signed by Microsoft.

A counterfeit site is distributing a malicious version of Flyoobe, the Windows 11 bypass tool. The developer warns against downloading the utility from any source but GitHub.

China-linked Storm-1849 is aggressively exploiting Cisco ASA vulnerabilities globally, targeting U.S. and European gov networks. CISA issued an emergency patching directive.

OpenAI launched Aardvark, a GPT-5 powered agent that autonomously detects, reproduces, and generates fixes for software vulnerabilities in real time.

A developer managed to shrink a fully bootable Windows 7 copy to 69MB—smaller than a mobile app. The feat demonstrates the limits of OS minimalism.

A surge of 760+ Android apps in Eastern Europe use NFC relay/HCE mechanisms to bypass payment security and execute fraudulent contactless transactions.

CISA confirms active exploitation of Linux kernel flaw (CVE-2024-1086) for root access via ransomware. The 10-year-old bug affects most major Linux distributions.

A critical flaw allows indirect prompt injection to trick Claude into exfiltrating user data via its File API by substituting an attacker's access key. Anthropic warns users.

AI browsers like Edge Copilot & ChatGPT Atlas create new risks. Researchers warn agentic automation amplifies data theft via hidden instructions and zero-day vulnerabilities.

Microsoft signed a 5-year, $9.7B deal with IREN for NVIDIA GB300 GPU compute capacity, part of a strategy to meet surging global demand for its Azure AI services.

OpenAI signed a $38B deal with AWS for cloud computing infrastructure, diversifying its resources after ending exclusivity with Microsoft. AWS gains a major AI client.

Microsoft is simplifying Windows Update names by removing OS version, date, and architecture—a change criticized by admins for degrading readability and context.

Developer @XenoPanther created a Windows 7 build that occupies just 69 MB. The ultra-compact OS successfully boots but is primarily a fascinating proof of concept.

Microsoft Authenticator will purge Entra ID credentials from jailbroken/rooted devices starting Feb 2026 to block token theft, enforcing security for enterprise accounts.

Apple unveiled a fully featured web-based App Store homepage with search, cross-platform toggles (iOS, macOS, watchOS), and a curated "Today" section.

Edge v142.0 introduces cross-platform passkey sync, letting users reuse passkeys securely across devices with a PIN, enhancing passwordless authentication.

Apple has officially released iOS 26.1, introducing two noteworthy new features. First, users can now disable the translucent “Liquid Glass” effect, increasing background opacity for improved clar…

Gemma is an open-source artificial intelligence model developed by Google, available to all developers through Google AI Studio and other distribution channels. However, developers may now find it…

In an example of how threat actors are adapting to modern AI ecosystems, Microsoft’s Incident Response – Detection and Response Team (DART) has uncovered a sophisticated espionage-focused backdoor…