JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Polls Close in Maine as Democrats Make Final Push to Oust Sen. Susan Collins AU: Criminal investigation after NSW Health hit by cyber breach Ransomware claim: iLending & J.C. Flowers & Co. (payoutsking) Ransomware claim: darrequipment.com (chaos) Hackers hijack cPGuard autoupdate to deploy backdoor, steal data Fresh European Fridge Attacks Put Cold-Chain Security in Focus North Korean fake job interview led to $6.3B Binance heist Germany Busts ‘Crime-as-a-Service’ Investment Fraud Outfit Nepal Anti-graft Body Charges ex-PM Madhav Nepal, 96 Others with Corruption Defense and aerospace firm settles with government over allegedly failing to meet cybersecurity contract requirements WorkOS says attacker used ARTEX AI to breach internal sales app Ransomware claim: Project Trojan Horse (whitearmor) Ransomware claim: Buchanan Ingersoll & Rooney PC (falcon) Trump Scrambles to Halt Military Aid to Israel to Deprive El-Sayed of a Talking Point Serbian Bank Tied to Outgoing Regime Collapses After Internal Vault Theft GHSA-gh9r-c94j-cmp5: Stanza: RCE via pickle deserialization in the lemmatizer Ransomware claim: Project Trojan Horse (Whitearmor) Ransomware claim: Buchanan Ingersoll & Rooney PC (Falcon) Oklahoma man charged with mailing threats, substances to election officials nationwide  Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack Ukraine and Russia both report fake emergency alerts after cyberattacks target apps as limited ceasefire ends Binance says fake job interview led to $6.3 billion crypto heist Nine health systems affected by AI company data breach JPN: More companies seeking cyber insurance following high-profile data breaches KR: Presidential office holds emergency meeting over leak of personal data of president, trip entourage Google dismantles massive botnet hidden in Android TV boxes AI policy wonks declare ‘sovereign agents’ a threat to civilization Want an iPhone Duo for the holidays? Apple’s latest stock update isn’t reassuring Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist Your Apple Watch has 2 new controversial listening features – but you have to opt in Google: LLMjacking attacks rack up $1 million in cloud AI charges mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity Several German lawmakers and foreign policy staff received Apple warnings on spyware Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes SUSE lays off 1 in 10 workers – citing AI and automation DRC Orders Probe into Illegal Mining Following Major Copper and Cobalt Seizure GHSA-33r5-xmm8-v6x5: Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access GHSA-7w38-ggh5-v542: Elo Ruby backend has Remote Code Execution via unescaped `#{…}` interpolation in emitted string literals and subtype-constraint labels GHSA-x9rp-7wh3-2rj5: Elo backends have code injection via unvalidated emission of programmatic AST fields British businesses caught in Europe-wide supermarket fridge attacks GHSA-p3jp-9v83-76w9: Microsoft Security Advisory CVE-2026-111497 – .NET Brotli Decoder Out-of-bounds Write Vulnerability HomeView with an arm? Apple reportedly plans $1,000 swiveling smart panel Nvidia RTX 50 GPUs hit with more price hikes – up to $500 GHSA-48v2-6jcm-fc99: praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection) I tried Sonos’ latest app features – these 2 small upgrades fix big annoyances GHSA-j97h-3f8r-mrjr: Keycloak has authentication bypass via jwt algorithm confusion Ashley Hinson’s Digital Chief Oversees Firm Paid Millions to Push Israeli Propaganda Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles Home Research & Field Notes