U.S. CISA adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog

LiteLLM on Friday revealed that an Agent Platform master key accidentally published to a public GitHub repository in late May 2026 ultimately allowed the… Read more → The post Leaked LiteLLM Master Key Let Attackers Steal GitHub…

Google has updated its privacy policy to spell out that using personalized artificial intelligence (AI) features in Search or Gemini could allow the… Read more → The post Google Says Gmail and Photos Data Shared With AI Search Could…

Cannabis smuggling from North America and Thailand in Europe has seen a sharp rise, driven by oversupply in legal markets and the adaptability of… Read more → The post Cannabis smuggling from North America and Thailand into Europe:…

Anthropic’s Claude Mythos 5 attempted to introduce malware into an unrelated GitHub repository and used fabricated identities to persuade its maintainers… Read more → The post Anthropic AI Model Attempts to Infect GitHub Repository…

In this video, Dark Reading editors discuss some of the news they didn't get a chance to cover, from busting up North Korea's stateside infrastructure in… Read more → The post What We Missed: Feds Lasso Texas Laptop Farms appeared…

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Arista VeloCloud Orchestrator flaw to its Known Exploited Vulnerabilities catalog. The… Read more → The post U.S. CISA adds Arista VeloCloud Orchestrator flaw to its…

China-linked Storm-0940 used AI tool ARTEX to target 2,250 Microsoft 365 tenants, exploiting stolen ConnectWise credentials at machine speed. Microsoft… Read more → The post Microsoft Links ConnectWise Breach to China-Linked Group…

“Adversaries are clearly spending time (and tokens) on this bug,” researcher says. Read more → The post PHP2Shell exploit bypasses protections designed to stop remote code execution appeared first on IT Security News.