Threat Wire reports Chrome silently downloading and restoring Gemini Nano models, Linux Dirty Frag kernel flaws exploited for local privilege escalation, and ShinyHunters’ Canvas extortion, alongside AI security and certificate-service updates.
Threat Wire covers Linux copy-fail, a local kernel flaw that can enable root access and container escape; a GitHub Git-infrastructure injection flaw fixed before any reported exploitation; and Team PCP’s compromise of PyTorch Lightning packages with credential-stealing`
Threatwire reports a 90-minute Bitwarden NPM supply-chain attack targeting developer secrets, an Apple patch for retained deleted notifications, a Lovable project-data exposure, and an unconfirmed claim of unauthorized Cloud Mythos access.
Threatwire covers a reported Vercel breach involving compromised OAuth tokens, AI model security testing, and NIST changes that prioritize CVE enrichment for selected vulnerabilities while moving the existing backlog to an unscheduled category.
The roundup covers AWS security agents, Railway's CDN caching misconfiguration, AI-discovered Vim and Emacs vulnerabilities, reported LinkedIn data collection, a Claude code package leak, and updated NIST DNS security guidance.
The video discusses CVE-2026-5281 affecting Chrome and Chromium, and CVE-2026-4688 affecting Firefox. It describes potential renderer compromise in Chrome and a Firefox sandbox escape.
The video reports that malicious packages were published through compromised Axios releases and that Team PCP used stolen credentials and AWS keys in attacks involving Cisco development environments. It warns that stolen secrets could enable further compromises.
Threat Wire covers age-verification laws, Chrome’s hardware-bound session credentials, Anthropic’s Mythos and Project Glasswing vulnerability research, a reported Adobe Reader zero-day delivered via PDF, and FBI recovery of deleted Signal messages from iOS notification
ThreatWire covers a malicious Axios package release linked to a maintainer-account compromise, Cisco’s TeamPCP-related breach, browser zero-days, and other security developments including a hosting misconfiguration and updated DNS guidance.
Hak5’s Wi-Fi Pineapple Pager 1.0.8 adds dynamic, nested payload menus, payload metadata and Windows line-ending support, plus recon stability fixes and updated Wi-Fi drivers.
ThreatWire reports TeamPCP supply-chain compromises involving Trivy and light LLM, an FCC plan to ban foreign-made consumer routers, allegations about Delve’s compliance reports, and a reported Cloudflare tracking-script injection.
Threat Wire covers Nvidia's Nemo Claw security layer for OpenClaw, the Coruna and Dark Sword iOS exploit kits and Apple's update advice, Android's sideloading safeguards, and a hack that disabled breathalyzer-based car interlocks.
