JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html Is There a Left Candidate for President? GHSA-xgjr-7j9q-2h4r: listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials GHSA-5w5g-j6hw-6p8f: OSAC operator: Kubeconfig credential-plugin execution and SSRF in console proxy GHSA-92r3-p8c2-3fpx: Eclipse hawkBit DDI has Privilege Escalation that allows Tenant-Isolated Firmware Exfiltration Android is getting my favorite iOS tracking feature – what to expect Thinking Machines’ new model takes the lead in western open-weight AI QNAP says hackers breaching NAS devices in Plex2Shell attacks FBI agent pleads guilty to stealing $2.4 million in crypto from nation-state hackers Apple will monitor your public iCloud links now, starting with iOS 27.3 Ransomware claim: Houston Machine and Thread (akira) Ransomware claim: Ligne Roset (akira) You Might Be Someone Else’s AI Test Environment UK Sex Workers Wake Up to Sites Purging Their Content Follow UK Porn Ban Installing the Fix for an Exploited WordPress Flaw Can Expose Some Sites One Last Time Gnosis Pay Data Breach Exposes Crypto Card Users’ Personal Data Ransomware claim: Conecuh Sausage Company Inc (interlock) Ransomware claim: Algonomy (direwolf) Veeam warns of Software Appliance boot failures on AMD EPYC hosts Attacks on supermarket and blood storage systems prompt US warning Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on Honeypot Railway Engineer Admits Running AI Agents Against Rival Cloud Platform Big Tech sues over California plan to limit kids’ scrolling IMSI vs IMEI: What Your Phone Broadcasts and Who Can Read It OpenAI Launches GPT-6 Cyber After AI Helps Find 81 Firefox Flaws, 948 Linux Exploits Pinpointing Location of Videos from Background Airplane Sounds In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days CEO-spoofing scammers used AI to help steal more than $100 million, feds say OpenAI Rates GPT-6 Cyber Critical After Major Vulnerability Discoveries Chainalysis says breach exposed credentials for all customers DigiCert Data Breach Impacts Business Customer Information Why Europe’s Freezer Hacks Spread So Far, So Fast The Next Target for Data Breach Lawsuits – Law Firms That Represent Breached Parties NI: Parents warned to be on alert after school data breach Contractors DigiCert data breach exposes customer information, identity documents Any long password will do: SSH flaw lets hackers into Alpine systems, routers and more OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line Ransomware claim: Istituto Borgo (shiba) sshole: OpenSSH Fixes Password Bypass on Alpine Linux Refrigeration Cyberattacks Draw FBI and CISA Warning DigiCert admits 16-month security lapse exposed customer information US Agencies Urge Organizations to Harden Refrigeration Controllers ARTEX Offensive AI Tool Activity Far Exceeds Reported Campaigns, Censys Finds Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158) Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack D-Link warns of multiple zero-days in DGS-3130 Series switches Ransomware claim: Dompé Farmaceutici S.p.A. (n0n) Home Research & Field Notes