JEDI-SEC | Security Research & Digital Defense https://validator.w3.org/feed/docs/rss2.html ‘No One Is Like This:’ Muse Sexts While Roleplaying as Real People ‘Way more terrifying than I expected’ New Trump Rule Threatens Immigrant Families With Separation or Homelessness Kazakh Wealth Fund, Railway Chiefs Detained in Corruption Probe LEGO’s BrickLink taken offline: What users should know is there a way to actually find social media profiles via email address? Can anyone help with cheater apps How Beginner Creators Can Earn with the Temu Influencer Program This Black Friday GHSA-4g86-54fm-h9h8: Microsoft Security Advisory CVE-2026-118740 – Aspire Security Feature Bypass Vulnerability Don’t put Section 702 spying law renewal in defense bill, groups urge Hill leaders International operation dismantles malware networks, exposes 6.4 million stolen credentials Hackers Abuse Microsoft SQL Servers to Deploy Monero Miner and Gh0st RAT Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry European authorities take down SteaIC malware servers for second time this year ARTEX: 916 Exposed AI Pentest Consoles Mapped in the U.S. ConnectWise investigates ScreenConnect breaches after reports of incidents at nearly 50 organizations New Windows SignDrop zero-day gives hackers SYSTEM privileges Weak Passwords Expose SQL Servers to Cryptominer and Gh0st RAT Police dismantle Gootloader, CastleRAT, StealC malware infrastructure Hong Kong Sogo data breach puts personal information of 820,000 members at risk Unocoin Goes Dark As 81,000 Wallets Show Zero Holdings Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass Apache Patches Critical HTTP Server RCE Found by Anthropic, Google 186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk Police dismantle Gootloader, CastleRAT, StealC malware infrastructure Picus puts AI agents on the offensive with autonomous pentesting Attackers Use Autonomous AI to Target Semiconductor, Defense and Civil Society Sectors Attackers breached 10 organizations with an open-source AI pentest framework Your Endpoint Management Platform Could Be Your Biggest Security Risk Microsoft Exchange Server 2016 and 2019 enter their ‘permanently vulnerable’ era Predator, Pegasus and Graphite: Governments Accused of Spyware Abuse Face Little Accountability More Than 1,300 Diplomatic Passports Missing in Vanuatu, Report Finds Hijacked email accounts complicate investigations into European bomb hoaxes Apify rotates API tokens, prompts 2FA resets after breach Hacked Asian Telcos Used to Intercept Taiwanese Calls and Texts PHP2Shell Exploitation on Check Point Gateway Why scammers want you to allow push notifications Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity Apple’s HomeView Tries Face Authentication Without FaceID Chrome, Firefox Updates Patch Over 180 Vulnerabilities Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign Operation Endgame malware takedown turns up over 6 million stolen logins Romania says it stopped Russian cyberattack targeting government emails nDiligence Releases Four-Year Study Identifying a Critical Supply-Chain Vulnerability Across 50 Platform Types Daylight Lands $80 Million for AI-Powered Security Operations SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths Hackers exploiting ScreenConnect plugin flaw to spread malware across hundreds of PCs Home Research & Field Notes