TECH NEWS
* Researcher Hyunwoo Kim discloses Dirty Frag, a nine‑year‑old kernel flaw enabling root privilege escalation across major Linux distros * The exploit chains two page‑cache write bugs, works reliably without race conditions, and currently has no CVE or patch * Mitigation requires disabling vulnerable kernel modules, but this breaks IPsec
TECH NEWS
Peter Williams, a veteran cybersecurity executive who was the head of the hacking and surveillance tech division of U.S. defense contractor L3Harris, has been ordered to pay $10 million to its former employer. Williams was the central figure in one of the worst leaks of advanced hacking tools in
TECH NEWS
* Mozilla says it has patched over 400 bugs with the help of Anthropic Mythos * The tool had to be 'harnessed' to Firefox for the best results * Mythos offers a step away from the typical 'unwanted slop' provided by AI fuzzing tools Anthropic’s latest cybersecurity tool
TECH NEWS
* A spoofed site (claude-pro[.]com) delivers poisoned installers that sideload DonutLoader and the Beagle backdoor * The operation mimics legitimate Claude software, likely tied to PlugX operators using DLL sideloading * Researchers warn of malicious ads and SEO poisoning, urging users to verify links before downloading If you’re looking to download
TECH NEWS
* ESET uncovered 28 fraudulent apps on Google Play, downloaded 7.3M+ times, falsely claiming to reveal call/SMS/WhatsApp histories * The apps generated fake data and charged $6–$80 subscriptions, with most victims in India * Google removed the apps and refunded Play‑based payments, but third‑party payment victims must
TECH NEWS
* VRT offers live sports, movies, TV shows completely FREE * Watch VRT live stream in Belgium * ABROAD? Use NordVPN to watch VRT from ANYWHERE Looking to watch VRT – Belgium's premium (but FREE) Dutch-language streaming platform – from outside Belgium? If you're visiting the US, UK, Canada or anywhere
TECH NEWS
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help
TECH NEWS
* OpenAI introduces GPT‑5.5‑Cyber following uproar around Anthropic Mythos * It's a modest upgrade focused on permissive cybersecurity tasks like vuln triage and malware analysis * Access is limited to vetted teams in the Trusted Access for Cyber (TAC) program, unlike Anthropic’s more restricted Mythos Preview OpenAI
TECH NEWS
Cybersecurity researchers from LayerX have found a major security flaw in the Claude for Chrome browser extension that could allow hackers to take full control of the AI assistant. They have named this vulnerability ClaudeBleed, and their research shows that even a basic extension with no special permissions can hijack
TECH NEWS
OPINION When President Donald Trump returned to power, he cast himself as the anti‑Biden on AI. First, hetore up Biden's Executive Order 14110, which haddemanded "safe, secure, and trustworthy" AI. He then replaced it with his own "Removing Barriers to American Leadershipin Artificial Intelligence&
TECH NEWS
* ShinyHunters briefly hijacked login portals for ~330 institutions, posting ransom demands and threats * The group extended its deadline to May 12, warning of full data leaks if no settlement is reached * Instructure confirmed the earlier breach but maintains sensitive financial and ID data was not exposed The Instructure cyberattack has
TECH NEWS
Poland’s Internal Security Agency (ABW) has documented a significant escalation in cyberattacks targeting industrial control systems (ICS) and other operational technology (OT) infrastructure during 2024 and 2025, with state-sponsored threat actors increasingly shifting focus toward the physical disruption of critical services. A Polish official revealed in August 2025 that
