Skip to main content
The Wire
CRITICALHackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens CRITICALKREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens FILEDIran-Linked Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists CRITICALNintendo Switch Vulnerability Lets Nearby Attackers Run Unauthorized Code via QR Code Feature FILEDUK Government Begins Moving 23 Million Users Away From Passwords With Passkeys CRITICALChina-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy GRIMWEDGE Backdoor FILEDTelegram Desktop Flaw Lets Hidden JavaScript Steal Messages From HTML Chat Exports FILEDMalicious Twitch Extension Exposes OAuth Tokens of More Than 30,000 Users CRITICALHackers Exploit Critical WSO2 API Manager JWT Flaw Using Forged Admin Tokens CRITICALKREMLIN Banking Malware Hijacks Chrome and Edge to Steal Credentials and Session Tokens FILEDIran-Linked Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists CRITICALNintendo Switch Vulnerability Lets Nearby Attackers Run Unauthorized Code via QR Code Feature FILEDUK Government Begins Moving 23 Million Users Away From Passwords With Passkeys CRITICALChina-Linked Hackers Chain Chrome and Windows Zero-Days to Deploy GRIMWEDGE Backdoor FILEDTelegram Desktop Flaw Lets Hidden JavaScript Steal Messages From HTML Chat Exports FILEDMalicious Twitch Extension Exposes OAuth Tokens of More Than 30,000 Users
CyberNews by Zentrya One

Latest reports

Page 4 of 8
critical CVE-2026-59821 Cloud & AppSec

Nearly 10% of Exposed LiteLLM Gateways Still Accepted the Default Admin Key

Security researchers have discovered that nearly one in ten publicly accessible LiteLLM deployments were either using the platform's default administrative key or operating without authentication, potentially exposing AI infrastructure to serious attacks.

Zentrya One Desk 10 Sept 2026 8 min read
Malware

Infostealer Logs Reveal Stolen AI Session Tokens Capable of Bypassing MFA

Cybercriminals are increasingly targeting artificial intelligence accounts by stealing browser session tokens and API credentials from infected devices. These stolen artifacts may allow attackers to access AI services without entering a username, password, or multi-factor authentication (MFA) code.

Zentrya One Desk 10 Sept 2026 8 min read
critical CVE-2026-82533 Vulnerabilities

A Sandboxed AI Agent Could Switch Off Its Own Sandbox — and DeepSeek Harness Trusted It

CVE-2026-82533 carries a 9.4 severity score, and the mechanism is almost embarrassingly simple: the harness decided who to trust by reading a header the caller writes itself. Three weeks before the CVE landed, a developer had already posted a working reproduction on DeepSeek's own discussion board.

Zentrya One Desk 10 Sept 2026 7 min read
The Daily Brief

Stay informed. Stay prepared. Stay one step ahead.

One brief each morning: the advisories that matter, the noise removed.

Double opt-in. One-click unsubscribe in every email. We never sell addresses.