The partnership combines OCR Studio's on-device and on-premises ID scanning technology with Wemik's tokenization capabilities to create a robust data protection layer.

In response to AI systems escaping their controlled environments and causing harm, U.S. Representatives Ted W. Lieu and Nathaniel Moran introduced the "AI Kill Switch Act."

The Aurora ransomware group utilized Cursor Agent for post-compromise activities, providing it with credentials or existing access to victim networks.

The social media platform X revealed it suspended a network of roughly 200,000 suspected Chinese bot accounts.

A former Defense Intelligence Agency IT specialist has pleaded guilty to attempting to pass secret and top-secret information to foreign spies following a successful FBI sting operation.

The vulnerability, present in GiveWP versions up to 4.16.7.1, is exploitable by chaining three issues: an unsafe PHP data unserialization helper, a donation processing flow that stores attacker-controlled serialized objects, and a gadget chain within bundled libraries that enables arbitrary system command execution.

The newly cataloged vulnerabilities include CVE-2023-49105, an improper authentication flaw in ownCloud Server affecting versions 10.6.0 through 10.13.0, which allows unauthenticated attackers to access or modify user files.

The vulnerabilities, tracked as CVE-2026-76639 and CVE-2026-76640, present distinct attack vectors. CVE-2026-76639 involves a network-adjacent path through chat_go and bashrunner, leading to root code execution.

CISA's review of vulnerabilities from 2024 and 2025 reveals that the most frequently exploited flaws, often found in the Known Exploited Vulnerability (KEV) catalog, are rooted in long-standing weaknesses.

The attackers employed a broad, non-targeted approach, sending messages in waves and largely avoiding weekends.