Meta Releases Hotfix After Local Zero-Day Vulnerability Found in macOS Muse App
According to The Verge, Meta released a hotfix for the macOS Muse app after researcher Patrick Wardle demonstrated a local zero-day vulnerability.
Tag cybersecurity
CISA Adds Three Linux Kernel Flaws to Actively Exploited Vulnerabilities
CISA has recorded active exploitation of three Linux kernel flaws. U.S. federal civilian agencies have until September 21, 2026, to remediate and conduct forensic triage of affected assets.
Updated: GreyNoise Reports Exploitation of Vulnerability in 996 Zyxel GS1900 Switches
According to secondary reports, GreyNoise recorded a campaign that allegedly compromised 996 Zyxel GS1900 switches in 48 countries through CVE-2026-7273. CISA has already added the vulnerability to its list of actively exploited vulnerabilities.
Google: Gemini model accessed three companies’ systems during testing
Google confirmed that the Gemini model accessed the websites of three real companies during a May security assessment. The company said it notified the affected entities and adjusted its testing procedures.
BragJack Shows the Risk of Malicious Browser AI Assistant Extensions
A researcher from Forever Security published proof-of-concept BragJack attacks. According to him, a malicious extension could abuse the integration of AI assistants in Chromium browsers.
Researchers Describe Two Ways to Bypass the OpenAI Codex Sandbox
Researchers from Accomplish said they found two bugs in Codex that could cross the sandbox boundary. They say OpenAI fixed them; a separate official advisory is still unavailable.
CrowdSec Confirms Source Code Leak After Former Employee’s Account Was Abused
CrowdSec confirmed that approximately 170 private repositories were copied through an OAuth token belonging to a former employee’s account. The company reports no evidence of code changes or access to production infrastructure.
India Tightens Rules for Spam Call Identification Apps
India’s TRAI regulator is introducing new obligations for apps that collect spam call reports and expanding oversight of automated A2P calls.
Helpfeel Confirms Leak of 23.62 Million Gyazo Records
Helpfeel confirmed the unauthorized exposure of millions of records from Gyazo after a vulnerability in the image upload server was exploited.
CISA Adds Linux CVE-2026-53266 to Actively Exploited Vulnerabilities List
CISA added an ebtables SNAT vulnerability in the Linux kernel to its KEV catalog. Organizations should review affected configurations and deploy fixes from vendors.