JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html The fake $750 Apple Cash reward that pays out nothing Hugging Face’s CEO Says His P(Doom) Is ‘Close to Zero’ Cyberattack Hits French Blood Banks as Hackers Target Refrigeration Systems Across Europe Hackers steal 320,000 UK school files and publish them on dark web Ransomware claim: fuss-sprunggelenk.de (safepay) Ransomware claim: sportschule-steinbach.de (safepay) Ransomware claim: titres-services.net (safepay) Ransomware claim: valemany.com (safepay) Ransomware claim: ruscopackaging.com (safepay) Ransomware claim: ehrenwall.de (safepay) Ransomware claim: jhz-bernardshof.de (safepay) Ransomware claim: prospecthillcamberwell.com.au (safepay) Cyberattack wipes cloud data at major Russian hosting provider Beget Ransomware claim: MAPFRE Brasil 2026 (destello) Cyberattack disrupts blood storage refrigeration systems in France Ransomware claim: El Cajon, CA (rhysida) GHSA-93cm-2v4m-c56c: Arc: DuckDB I/O aliases bypass database RBAC after CVE-2026-47735 mSecure tells users to change passwords but won’t say why Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root GHSA-mc8m-rr6c-r5qr: @payloadcms/storage-vercel-blob has access control bypass of uploads in Vercel Storage adapter SonicWall Won’t Patch EoL GMS Flaws That Could Expose Files, Alter Database Records NIKKE PC game launcher hacked to spread remote access, data-stealing malware Do You Live Near Lake Champlain? Help Seven Days and ProPublica Investigate Algae Blooms. Google, Partners Disrupt 1.3 Million-Device-Strong XCPE Botnet Vermont Has Spent Nearly a Billion Dollars to Clean Up Lake Champlain. But the Green Slime Keeps Coming Back. Vermont Was Supposed to Get an Audit of Its Lake Champlain Cleanup. It Never Happened. Ukrainian news outlet Kyiv Independent hit by suspected Russian cyberattack GHSA-3cgg-c5pp-57h6: odf-kit: HTML injection leading to XSS in odtToHtml() and odsToHtml() via unescaped style attribute values SENA Colombia Database Sale Claim Lists 20.56 Million Citizen Records With Identity, Contact and Employment Data Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit mSecure password manager hack prompts password reset warnings US gov IT worker pleads guilty to sending Top Secret files to Ethiopia US Sentences Venezuelan National to 12 Years for Laundering Over $1 Billion How banking giant ICBC helped Chinese firms gain a foothold in Europe’s wind market Google Calendar phishing campaign hijacks sessions, bypasses MFA China-Aligned Group Abuses Sogou Input Method to Deliver Malware 7 Best Security Add-Ons for Microsoft Entra in 2026 SonicWall warns of unpatched flaws in end-of-life GMS software Cycurion Habit verifies threats and validates fixes before closing cases Russian hackers target iOS and Android users with n-day exploits Sysdig Adds Runtime Security and Governance for AI Agents Descope Envoy brings AI agent authentication to consumer apps APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits Barracuda ESG Authentication Bypass Flaw Opens Path to Root BlueFlag Security adds controls for AI agents working under developer identities ‘There Is One Fight’: American Voters Reject Tech Oligarchy Incidents Move Too Fast for Pen & Paper Citrix expands oversight of autonomous browsing and AI agent activity Home Research & Field Notes