International

National Institute of Standards and Technology (NIST) demands feedback from industry and the government on how to update the National Vulnerability Database (NVD) since artificial intelligence is changing how groups find, evaluate, and fix cybersecurity problems. NIST has asked for information (RFI) about the future of the NVD. They want …

A group of almost 800 harmful packages was added to the npm registry in a new effort to spread malware that works on Windows, Mac, and Linux. “These packages appear to use AI slop squatted, or randomly generated typo-squatting package names, but all of them deliver a powerful RAT and infostealer …

The Open Web Application Security Project (OWASP) has published the Top 10 for LLM Applications 2026. This guide focuses on the main security risks in current AI apps and self-driving agents. The new version sets a clear guideline for developers, architects, and CISOs working with fast-changing enterprise GenAI systems, based on …

Thousands of data centers are in danger because of a 22-year-old problem in Baseboard Management Controller (BMC) processors, says the security company Lava. BMCs are found in many server platforms. They allow server management even if the operating system is not working. They are usually very important control points in a …

PentesterFlow is a new open-source AI tool for command lines. It is made for penetration testers and bug bounty hunters. It helps automate the work from finding problems to reporting them, while still allowing analysts to oversee the process. Most AI security tools have fake findings, weak context memory, and …

Anthropic launched the Claude Security plugin in beta. This tool uses AI to find serious security flaws in Claude Code. Developers can use it to spot issues before they release their work. The tool allows teams to check recent changes or whole repositories from the terminal, using the same Claude …

India is speeding up its work to make homegrown AI models for cybersecurity. These models will help protect important digital systems and lessens the need for foreign AI tools. The Ministry of Electronics and Information Technology (MeitY) has asked top Indian AI projects, Sarvam AI and BharatGen, to develop strong …

A new Linux flaw called “Bad Epoll” (CVE-2026-46242) lets regular users get root access on Linux servers, desktops, and Android devices. They can do this by taking advantage of a race condition and a use-after-free (UAF) in the epoll system of the kernel. Bad Epoll is a UAF vulnerability in …

Major data center and cloud service providers might have to pay a fine of up to $1 million or up to 10 percent of their yearly revenue in Singapore, whichever is more, if they do not follow cybersecurity, business continuity, and incident reporting rules in new proposed laws. The Digital …

Nepal has started a ‘Hall of Fame’ program to honor cybersecurity researchers who safely report security flaws in government digital systems. This is the first government-supported recognition for these researchers in Nepal. The project started with Devs.Nepal, a new online platform created by the Office of the Prime Minister and …