Every American data center story these days follows almost the same pattern. Someone has the chips, someone has the cash, and then the project just waits for power. That’s why Oracle is funding its own gas power plant in the New Mexico desert for OpenAI, and why China avoided the …
Read More »Anthropic’s Claude Code Source Code Reportedly Leaked
Anthropic’s special Claude Code CLI tool had its complete TypeScript source code inadvertently exposed due to a misconfiguration in npm package. A security researcher found a leaked .map file that pointed to the clear code stored on Anthropic’s own cloud. Security researcher posted on x saying that “Claude Code source …
Read More »TP-Link alerts users to patch router auth bypass vulnerability
TP-Link fixed some security flaws in its Archer NX routers. CVE-2025-15517 is a security flaw that affects Archer NX200, NX210, NX500, and NX600 wireless routers. It is due to a lack of authentication that attackers can use without special access. “A missing authentication check in the HTTP server to certain …
Read More »
ALERT
CISA Warns of Active Attacks on Microsoft SharePoint and Zimbra
Cybersecurity and Infrastructure Security Agency (CISA) have added to its Known Exploited Vulnerabilities (KEV) Catalog. They included two serious flaws that cybercriminals are using. These flaws are a dangerous remote code execution (RCE) issue in Microsoft SharePoint and a stored cross-site scripting (XSS) problem in Zimbra Collaboration Suite. This shows …
Read More »Hive0163 uses AI generated malware for persistent access
IBM X-Force reports that a money-driven threat group named Hive0163 used a probable AI-made malware called Slopoly in a ransomware attack in early 2026. IBM states that the malware allowed the attackers to maintain access to a hacked server for over a week during the later stage of the attack. …
Read More »Russia linked hacker target Signal, WhatsApp globally: Dutch warn
The Netherlands’ military and domestic intelligence have issued a warning that Russian hackers are behind a global cyber campaign targeting Signal and WhatsApp accounts of officials and military staff. The hackers are using fake chatbots to deceive these targets into sharing their PINs, giving them access to messages. Hackers are …
Read More »Google Patches 3 Critical Flaws and 7 High-Risk Vulnerabilities
Google has issued an urgent update for Chrome, fixing 10 security flaws: 3 critical and 7 high severities. This update is being released for Windows, Mac, and Linux users and will reach everyone in the coming days and weeks. CVE-2026-3536: Integer Overflow in ANGLE – Reported by cinzinga, this vulnerability …
Read More »Thousands of Asus Routers Hacked in ‘WrtHug’ Campaign globally
SecurityScorecard research, in consultation with ASUS, details Operation “WrtHug,” a widespread compromise of ASUS routers. It leverages the proprietary AiCloud service with Nth day vulnerabilities in order to gain high privileges on End-Of-Life ASUS WRT routers. A shared, self-signed TLS certificate with an unusually long 100-year expiration identifies compromised devices. …
Read More »FortiWeb Auth Bypass Vuln Exploited: Script to Detect Vuln Appliances
A Fortinet FortiWeb vulnerability is being exploited to create new admin users on exposed devices without any authentication. The issue is fixed in FortiWeb 8.0.2, and admins are urged to update as soon as possible and check for signs of unauthorized access. Threat intelligence firm Defused discovered an “Unknown Fortinet …
Read More »Massive Intel data exposure: hacker harvests 270K employee data
A whitehat hacker broke into four of Intel’s internal systems and discovered that the sensitive data of 270K Intel employees’ was exposed. Then, he spent months helping the company plug the leaks, only to receive one automated thank-you note. Security researcher Eaton Zveare found a way to bypass authentication on …
Read More »
InfoSecBulletin Cybersecurity for mankind