Google patches Pixel modem zero-day exploited in targeted attacks

U.S. CISA adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following Ivanti Connect Secure vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: The vulnerabilities are part of an exploit chain that cybersecurity firm Volexity first documented in…

TCP Use-After-Free: CVE-2026-98432 / CVSS 9.8

Proton pledges to open-source internal AI tools after backlash

Proton has pledged to release and open-source internal AI tools, including more capable versions of its Lumo assistant, and publish details of its software review processes following criticism of its AI strategy and workplace culture. In a statement published yesterday on X, the company said it would disclose where AI is permitted internally, where it … The post Proton pledges to open-source internal AI tools after b…

Spooky New Infostealer Malware Uses AI to ‘Autodox’ Victims

Named “Volta-Autodoxer,” the recently uncovered malware uses AI tools to collect troves of data about victims, from login credentials and credit card numbers to Discord sessions and UberEats receipts.