Cybersecurity

We Measured AI Code Drift Across 5 Tools and 210 Components. Frequency Alone Lied to Us.

Empirical research from ReWeaver AI. 42 identical prompts, across 5 tools and 8 production dimension…

How one Owner could take over any account in another company — cross-tenant IDOR in InvoiceShelf (CVE-2026-55610)

TL;DR InvoiceShelf (self-hosted, multi-company invoicing) let any company Owner read and overwrit…

Telegram Desktop 安全设置清单：下载、登录和多设备使用前先检查这些项

很多用户第一次在电脑端使用 Telegram 时，会把下载入口、扫码登录、中文界面、文件保存位置和设备安全混在一起处理。这样最容易踩到两个坑：下载到非官方客户端，或者在公共电脑上长期保留登录会话。 …

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-Signed npm Packages

ChainDrop: A Supply Chain Worm Stealing Credentials and Self-Propagating via Legitimate Provenance-S…

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from Low-Privilege Triage Agents

Google ADK Agent-to-Agent Attack: Privilege Boundary Breakdown Calling Privileged CI Workflows from …

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditions

TP-Link Omada ZTP: Multiple Vulnerabilities Enabling Fleet Takeover via Device Adoption Race Conditi…

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,090 Issues

Autonomous Vulnerability Discovery with Frontier AI: A Multi-Agent Verification Pipeline Finding 14,…

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imitation, AiTM, and Wire Fraud

Compromised Email + Copilot: AI-assisted BEC Accelerating Internal Reconnaissance, Writing Style Imi…

Cómo crear contraseñas sólidas y a prueba de ataques Guía práctica de ciberseguridad para usuarios exigentes

Por qué una buena contraseña sigue siendo vital Aunque la autenticación de doble factor (2FA) está …

Turning an old Android phone into a screen-off security camera (and the tradeoffs)

Turning an old Android phone into a security camera sounds simple until you actually try to leave it…

CVE-2026-70593: CVE-2026-70593: Path Traversal and Arbitrary File Write via Custom Theme Upload in Ghost CMS

CVE-2026-70593: Path Traversal and Arbitrary File Write via Custom Theme Upload in Ghost CMS Vuln…

5 Consejos Avanzados de Ciberseguridad para Usuarios Dedicados

Todos conocemos las reglas básicas de ciberseguridad: actualizar nuestros equipos, tener cuidado con…