Nicholas Robert - The CyberSignal (Page 22)

Flat white line-art of an image file linked to a server rack, on a teal background — Bing Images SVG remote code execution on Microsoft's servers.

Vulnerabilities

Researchers Disclose Bing Images Flaws Letting Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers

Researchers at XBOW disclosed two Bing Images flaws that let crafted SVG files run commands as SYSTEM on Microsoft's own servers. Microsoft fixed both server-side before the details went public — this is primarily a vendor-fix story, with limited consumer action.

Flat white line-art of an envelope link spawning a small robot figure inside an office doorway, on a teal background — the ChatGPT AgentForger research disclosure.

Artificial Intelligence (AI)

Researchers Disclose ChatGPT "AgentForger" Flaw That Could Deploy Rogue Workspace Agents via a Phishing Link

An AI-agent phishing vector hits ChatGPT — defender review while OpenAI's fix propagates this week.

Flat white line-art of a video-call window beside a wallet icon on an inspection stand, on a deep blue background — the BlueNoroff Zoom phishing-kit disclosure.

North Korean Threat Actors

Researchers Document "BlueNoroff" Zoom Phishing Kit Profiling Crypto Wallets Before Malware Delivery

Another BlueNoroff cryptocurrency-targeting operation lands — a defender review for crypto-industry Zoom users this week, framed around wallet-profiling awareness rather than kit mechanics.

Flat white line-art of a robot arm and a large database cylinder joined by a single key, on a deep-teal background — Kimi K3 agents and Redis zero-days.

Artificial Intelligence (AI)

Researchers Report Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit Autonomously

A Chinese-model autonomous-AI-agent capability lands with real Redis zero-days — AI-safety analysis this week.

Flat white line-art of a large envelope linked to a shield and a webmail window, on a cobalt-blue background — the NCSC-led Russian Zimbra zero-click alert.

Nation-State Cyber Threats

UK NCSC and Partners Publish International Alert on Russian State-Supported Zero-Click Zimbra Zero-Day Campaign

A year-long Russian state-supported zero-click Zimbra campaign, exposed this week by NCSC UK and partners across some 16 nations — a defender review for any organization still running unpatched Zimbra.

Flat white line-art of a water tower and an electricity pylon linked to an industrial controller box, on a deep amber background — CISA's advisory on Iran-linked targeting of ICS.

Iranian Threat Actors

CISA Warns Iran-Linked Actors Are Disrupting US Water and Energy Providers, Targeting Siemens and Schneider ICS

A CISA warning on Iran-linked disruption of US critical infrastructure — a defender review for water and energy operators this week.

Flat white line-art of a management console with an open lock swinging free, on a deep-blue background — the Check Point SmartConsole authentication bypass CVE-2026-16232.

Vulnerabilities

Check Point Patches Exploited SmartConsole Authentication Bypass CVE-2026-16232

A Check Point SmartConsole authentication bypass under active attack — defender teams accelerate patch verification this week.

Flat white line-art of a sealed box on a laptop with one line breaking out to a file folder, on a teal background — Claude Cowork VM escape.

Artificial Intelligence (AI)

Researchers Disclose Claude Cowork Flaw That Could Let AI Agent Escape Its VM and Access Mac Files

Another agentic-tool VM-escape disclosure — defender review for Claude Cowork users on Mac this week.

Flat white line-art of a hard-disk drive linked to a large keyhole, on a deep teal background — the RefluXFS Linux root-escape disclosure.

Vulnerabilities

Researchers Disclose Nine-Year-Old "RefluXFS" Linux Flaw Giving Local Users Root on Default RHEL Installs

Another long-standing Linux root escape lands — defender verification for RHEL-based environments this week.

Flat white line-art of a power meter beside a folder of customer records and an Australian map outline, on a teal background — Origin energy data breach.

Data Breaches

Australian Energy Giant Origin Confirms Customer Data Compromised in Cyberattack

An Australian critical-infrastructure disclosure lands — sector-advisory work for energy operators this week.

Flat white line-art of a figure outline stepping through an open gate in a wall, on a teal background — OpenAI ChatGPT Agent AI-insider fix.

Artificial Intelligence (AI)

OpenAI Fixes ChatGPT Agent Flaw That Could Have Let Attackers Forge an AI Insider

OpenAI patches an AI-insider-forgery vulnerability in ChatGPT Agent — defender review this week.

Flat white line-art of two document seals joined by a copied outline, on a slate-blue background — the White House accusation over Anthropic's Fable model.

Policy & Government

White House Accuses Chinese Company of Distilling Anthropic's Fable Model

A White House accusation lands in the US-China AI-policy conversation — Anthropic's Fable at the center this week.

See all