Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks 
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026 
NSAuditor AI Enterprise 0.32.9: Stricter Evidence Gaps and Cleaner Compliance Packs 
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape 
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory 
Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks
What's new: A Chinese-speaking threat actor utilized the open-source Hermes Agent framework to command an AI model named DeepSeek for...
6 Reasons Why Device Code Phishing is the Fastest-Growing Threat of 2026
What's new: Device code phishing, leveraging the OAuth 2.0 device authorization grant, has rapidly evolved into a significant threat, with...
NSAuditor AI Enterprise 0.32.9: Stricter Evidence Gaps and Cleaner Compliance Packs
<p>Nsasoft US LLC has released <strong>NSAuditor AI Enterprise Edition 0.32.9</strong>, a report-quality release focused on how compliance evidence is presented...
Three Critical VMware Flaws Allow Auth Bypass, Code Execution, and VM Escape
What's new: Broadcom has released security updates for multiple VMware products, addressing three critical vulnerabilities: CVE-2026-59309 (authentication bypass in vCenter),...
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI Memory
What's new: A critical vulnerability (CVE-2026-59726, CVSS score: 10.0) has been discovered in Ruflo, an open-source agent meta-harness for AI...