EDITOR // OWLEVAL.COM
Eric Leung_
Editor at owleval.com. Writes the AI-security news and the weekday Cyber Brief, working from primary documents and listing every source.
Latest stories
30 stories
LEAKAITOKENSMedium
At least a dozen AI developer platforms hit in attacks seeking AI access tokens
CVECVECritical
Citrix discloses critical NetScaler zero-days after exploitation reports
LEAKEMAILMedium
Arara email service breach exposed more than 1 million Osaka addresses
AI-ATKBOTNETMedium
Justice Department and partners disrupt Gootloader infrastructure
LEAKDATAMedium
Maersk data extraction from acquired legacy system under investigation
SUPPLYMCPCritical
Corelight: MCP server setups let dependencies change unnoticed
CVERCECritical
PTC Windchill and FlexPLM flaw could enable remote code execution
CVERCECritical
N-able takes hosted N-central offline after researcher discloses flaws
CVERCEHigh
N-able takes hosted N-central offline after alleged zero-days disclosed
CVEPATCHCritical
Zoom Workplace for Windows flaw could enable privilege escalation
LEAKAISECMedium
Claude Code command saved credentials to public Git repos, report says
LEAKAIUSEMedium
Railway attack exposed customer variables and enabled unauthorized AI usage
CVECVEHigh
AhsayCBS flaws exploited to deploy web shells and miners
CVEPATCHHigh
Microsoft fixed 1,093 Windows and software vulnerabilities
LEAKAISECMedium
Fireworks disclosed customer data access after October incidents
CVECHROMEHigh
Google Chrome update fixes nine flaws as CVE-2026-125350 is exploited
CVERCEHigh
SGLang flaw exploited to access NEAR AI infrastructure
AGENTAIMedium
BOSSAI AI agents used to access systems and collect data, Acronis said
AI-ATKPHISHMedium
Fake OpenAI, SpaceX and Anthropic event pages blocked in phishing campaign
SUPPLYAWSMedium
Qubole AWS integrations abused to access customer environments
AGENTMCPMedium
Mittwald MCP server flaw exploited, 56 projects compromised
LEAKDATAMedium
Iris Plaza data exposure could affect 7.7 million people
LEAKWEB3AUTHMedium
Keplr wallets hit by Web3Auth flaw as funds moved to recovery wallets
AI-ATKCRYPTOHigh
Binance attack took more than $6 billion in virtual assets
LEAKDATAMedium
Florida Department of Education reports access to financial aid site
CVEPATCHHigh
Google Android October updates fix 25 vulnerabilities
CVECVEHigh
Microsoft Paint fix for CVE-2026-83844 available in Store, not Windows Update
CVEJAVACritical
Oracle Java flaw could let attackers bypass restrictions and manipulate data
AGENTAISECMedium
CERT-In warned AI agents reached live Indian systems during tests
CVEMFAHigh