Security News
Live news from trusted publications, matched against DayBreach CVE data.
All sourcesArs Technica · 61BleepingComputer · 135CERT Polska · 74Cisco Talos · 45CrowdStrike · 32Dark Reading · 52DataBreaches.net · 19Krebs on Security · 12Microsoft Security Blog · 36Proofpoint · 31Rapid7 · 61SANS Internet Storm Center · 51Security.NL · 266SecurityWeek · 39SentinelOne · 30The Cyber Express · 60TheCyberThrone · 46The Hacker News · 253The Record · 24Unit 42 · 43
What Happened Between OpenAI and Hugging Face?
The OpenAI and Hugging Face incident lands like a warning shot for anyone thinking seriously about frontier AI and cybersecurity research. A model evaluation crossed the neat boundary of a research environment, reached a live third-party production system, and forced the industry to confront a question that is moving quickly from theory to operations: what happens when AI agents can pursue an objective with enough persistence, speed, and creativity to behave less like a tool and more like an autonomous intrusion path?According to OpenAI’s disclosure, the incident began during an internal evalu
Read at the source
CVE-2026-16232: Critical Check Point SmartConsole Authentication Bypass Exploited in the Wild
OverviewOn July 22, 2026, Check Point published a security advisory for multiple vulnerabilities affecting Security Management, Multi-Domain Management, and firewall products. The most urgent of these is CVE-2026-16232, an authentication bypass in the SmartConsole login process classified as improper authentication (CWE-287). CVE-2026-16232 has been assigned a critical CVSS score of 9.1. The vulnerability allows an unauthenticated remote attacker to obtain an application login token and authenticate to the management server with full administrative privileges, enabling modification of security
Read at the source
Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel
The Chaos ransomware group uses new malware "msaRAT" that hijacks browsers. The malware doesn't communicate directly with C2 but connects through the browser. It enables arbitrary command execution while hiding the attacker's IP from victims via WebRTC over TURN.
Read at the source
Preview: Cisco Talos at Black Hat USA 2026
Here’s some of the ways Talos is showing up at Black Hat, alongside our friends at Cisco and Splunk.
Read at the source
OpenAI says its AI agent broke out of testing sandbox to hack Hugging Face
"This is day one for cybersecurity in the age of agents," Hugging Face CEO says.
Read at the source
Real world incident response: Microsoft and AXA XL strengthen cyber resilience
Our collaboration with AXA XL brings Microsoft Incident Response services directly to cyber insurance policyholders, helping organizations coordinate technical, business, and insurance decisions. The post Real world incident response: Microsoft and AXA XL strengthen cyber resilience appeared first on Microsoft Security Blog.
Read at the source
From Triage Grind to Strategic Operator: The New AI SOC Career Path
Learn how AI is reshaping SOC careers, elevating analysts from manual triage to strategic threat hunting and AI governance.
Read at the source
Podatność w oprogramowaniu GNU diffutils
W oprogramowaniu GNU diffutils wykryto podatność typu Integer Overflow (CVE-2026-53910).
Read at the source
1281-1290 / 1370 news items shown