🚨 Two new attacks break AMD's confidential VM protections. Dubbed 'Mior' and 'Skyfall,' the attacks let malicious cloud hosts steal secrets from SEV-SNP-protected VMs. Mior can also forge signed attestation reports. Read details →

⚠️ PostgreSQL patches 52 security flaws, including a 22-year-old bug allowing remote code execution. Tracked as CVE-2026-6460 (CVSS 8.8), the flaw lets authenticated users with object-creation privileges execute code on database servers. Patching alone may

‼️ BREAKING: One hostile command slipped into a Grok Bot agent can give an attacker root on the customer's cloud machine. Security firm Profero says it reported this in August and it is still unfixed. The way in is a Docker API that never asks for a login. Th

🚨 Hackers hijack Microsoft SQL Servers to deploy Gh0st RAT and cryptocurrency miners Fortinet researchers have uncovered an active campaign targeting internet-facing Microsoft SQL Servers, using brute-force attacks against weak credentials to gain access and

Extortion Group Luna Moth Flits Into Law Firms a Second Time by Alexander Culafi

The published SignDrop exploit has a critical limitation: it is not reliably operational. Independent testing confirmed it works, but found reliability issues and visible UAC disruptions. The article explains the failure points and how admins can check exposu