JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Trump Scrambles to Halt Military Aid to Israel to Deprive El-Sayed of a Talking Point Serbian Bank Tied to Outgoing Regime Collapses After Internal Vault Theft GHSA-gh9r-c94j-cmp5: Stanza: RCE via pickle deserialization in the lemmatizer Oklahoma man charged with mailing threats, substances to election officials nationwide  Binance Hack: How Fake Job Interviews and AI Abuse Led to a $6.34 Billion Attack AI policy wonks declare ‘sovereign agents’ a threat to civilization Want an iPhone Duo for the holidays? Apple’s latest stock update isn’t reassuring Binance Says Hackers Used Well-Known Tricks to Carry Out a $6.34 Billion Heist Your Apple Watch has 2 new controversial listening features – but you have to opt in Google: LLMjacking attacks rack up $1 million in cloud AI charges mSecure Warns Users to Change Passwords, Reset 2FA and Passkeys After Suspicious Activity Several German lawmakers and foreign policy staff received Apple warnings on spyware Chainstack Reports Production Systems Breach Exposing Customer Data and Password Hashes SUSE lays off 1 in 10 workers – citing AI and automation DRC Orders Probe into Illegal Mining Following Major Copper and Cobalt Seizure GHSA-33r5-xmm8-v6x5: Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access GHSA-7w38-ggh5-v542: Elo Ruby backend has Remote Code Execution via unescaped `#{…}` interpolation in emitted string literals and subtype-constraint labels GHSA-x9rp-7wh3-2rj5: Elo backends have code injection via unvalidated emission of programmatic AST fields British businesses caught in Europe-wide supermarket fridge attacks GHSA-p3jp-9v83-76w9: Microsoft Security Advisory CVE-2026-111497 – .NET Brotli Decoder Out-of-bounds Write Vulnerability HomeView with an arm? Apple reportedly plans $1,000 swiveling smart panel Nvidia RTX 50 GPUs hit with more price hikes – up to $500 GHSA-48v2-6jcm-fc99: praktor: Path traversal in Telegram file uploads allows writing outside the agent workspace uploads/ directory (stored instruction injection) I tried Sonos’ latest app features – these 2 small upgrades fix big annoyances GHSA-j97h-3f8r-mrjr: Keycloak has authentication bypass via jwt algorithm confusion Ashley Hinson’s Digital Chief Oversees Firm Paid Millions to Push Israeli Propaganda Free the Model, Sell the Gateway: Prompt Adware hidden in Jailbreak Bundles Google dismantles botnet secretly running on 1.3 million Android TV boxes Europol dismantles investment scheme that impacted potential victims in 50 countries Windows 11 can run better on PCs with 8GB now, Microsoft says – here’s why Binance Reveals How Fake Job Interviews and AI Tool Abuse Led to $6.43 Billion Theft GHSA-9ppr-wfw9-xvr2: Netfoil doesn’t decrement TTL Binance CEO says ‘months-long campaign’ led to $6.3 billion theft as N. Korea denies responsibility Roku is taking away a fan-favorite screensaver – but you have alternatives GHSA-h26j-4vp7-x9w2: Metalama: Unsafe deserialization over Metalama’s Visual Studio inter-process named pipe enables local code execution Seven Arrested in International Operation Targeting Investment Fraud GHSA-m3qr-fvp4-78xj: Arc has unauthenticated application log disclosure via `/api/v1/logs` Ransomware claim: Arthur Chapman Kettering Smetak Pikala PA (qilin) Ransomware claim: SK Global Software (akira) Ransomware claim: Pelham Plastics (akira) Citizen Lab Researchers Win IRTF Applied Networking Research Prize Ballot scanner malfunctions, flurry of federal legal actions test election officials on final day of voting  3AM Ransomware Hits 37 UK School Systems in Suspected AI-Assisted Attack Password manager mSecure tells users to change passwords, won’t say why Synology Warns of Ransomware Attacks Targeting NAS Devices Running Outdated DSM Versions Barracuda Flaws Could Be Chained to Bypass Authorization and Gain Root Access CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges Home Research & Field Notes