Meta Challenges WhatsApp and Instagram’s Category 1 Designation in the UK
Meta has appealed Ofcom’s decision to classify WhatsApp and Instagram as UK Category 1 services under the Online Safety Act.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
BragJack Shows the Risk of Malicious Browser AI Assistant Extensions
A researcher from Forever Security published proof-of-concept BragJack attacks. According to him, a malicious extension could abuse the integration of AI assistants in Chromium browsers.
Researchers Describe Two Ways to Bypass the OpenAI Codex Sandbox
Researchers from Accomplish said they found two bugs in Codex that could cross the sandbox boundary. They say OpenAI fixed them; a separate official advisory is still unavailable.
CrowdSec Confirms Source Code Leak After Former Employee’s Account Was Abused
CrowdSec confirmed that approximately 170 private repositories were copied through an OAuth token belonging to a former employee’s account. The company reports no evidence of code changes or access to production infrastructure.
India Tightens Rules for Spam Call Identification Apps
India’s TRAI regulator is introducing new obligations for apps that collect spam call reports and expanding oversight of automated A2P calls.
Helpfeel Confirms Leak of 23.62 Million Gyazo Records
Helpfeel confirmed the unauthorized exposure of millions of records from Gyazo after a vulnerability in the image upload server was exploited.
CISA Adds Linux CVE-2026-53266 to Actively Exploited Vulnerabilities List
CISA added an ebtables SNAT vulnerability in the Linux kernel to its KEV catalog. Organizations should review affected configurations and deploy fixes from vendors.
Microsoft Fixes Critical Azure AI Foundry Flaw Without Customer Action
Microsoft fixed CVE-2026-85889 on the Azure AI Foundry service side. The CVSS 10.0 flaw could have allowed an unauthorized attacker to escalate privileges over a network.
Check Point Releases Fix for Critical Flaw Allowing Remote Code Execution as Root
The CVE-2026-91843 vulnerability in Security Management and Log Server products has a CVSS score of 9.8. Check Point released a fix through LivePatch and recommends deploying it immediately.
Google Releases Stable AndroidX Security State Libraries for Patch Checks
New stable AndroidX libraries allow applications to programmatically assess the security patch status of the system, kernel, and Project Mainline modules.