Huawei Cloud Rolls Out Enterprise AI Products Across the Board, Building an Open Agentic Cloud
PARTNER CONTENT: Huawei Cloud strengthens the silicon bedrock on the cloud
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
CVE-2025-13032: Entering and Breaking the Avast Antivirus Sandbox Part 2
Article URL: https://www.safateam.com/intelligence-hub/research/technical-articles/cve-2025-13032-entering-and-breaking-the-avast-antivirus-sandbox-part-2 Comments URL: https://new…
Russia's Hybrid Cyber-Physical War in Europe Heats Up
A storm is raging in the form of cyber sabotage, disinformation, and drone attacks on European nations, particularly those that provide material support to Ukraine.
Roundcube Webmail Vulnerability in Attackers’ Crosshairs
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs app…
Project leader thought his team understood the plan, ended up fixing their 'interpretation' of it
Malicious compliance crosses cultural barriers
Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
A flaw in Cloudflare Containers let a paying customer read data that other customers' containers had left behind on the same server, Cloudflare and the researchers who found it sai…
Astronomer watches Starlink satellites sinking to build a ‘planetary barometer’
The atmosphere expands and contracts; watching objects in orbit reveals the extent
WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV
The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical security flaws impacting WSO2 and Adobe Commerce and Magento to its Known Exploite…
2026 just became the year of FreeBSD on the (Amazonian cloud) desktop
Desktop AMIs ‘designed to behave as much like Windows as possible’ now available as an on ramp for new users
Google Gemini can present cartoon or lifelike avatars to lip-sync generative chatter
Despite uncertainty about how human mimicry affects people, DeepMind fakes are here
Crook used three open source agents to break into a Fortune 500 hospitality company, a major US airline and 25+ other orgs
Operator’s AI bill averaged just $25 per completed scan
Google's TPUs to catch some rays in orbit next week
Part of Project Suncatcher, the proof of concept aims to see how well lightly modified compute fares in orbit
'Salesbleed' Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels.
MacSync malware uses public iCloud calendars to deliver new payloads
A new variant of the MacSync malware targeting macOS systems now uses public iCloud calendar events to deliver new native payloads. [...]
F-Droid app store thumbs its nose at Google's dev crackdown
The Chocolate Factory is tightening the screws on Android sideloading, but the FOSS app market is rolling out a huge overhaul and planning for the future
Autonomous AI Hacks Raise Thorny Questions of Legal Accountability
The prospect of legal accountability is unclear. Lawsuits are a possibility, but some legal experts believe any criminal investigations would face an extremely high burden. The pos…
SectopRAT Returns, Hiding Inside a Legitimate Application
The latest activity from the remote access Trojan (RAT) shows why organizations should monitor the behavior of applications rather than blindly trusting them, experts say.
New Carbonato malware uses AI agents to hijack exposed Docker hosts
A new botnet malware called Carbonato is targeting insecure hosts running Docker daemons to install the Hermes Agent AI framework and take control. [...]
Docker's new sandboxes aim to contain AI agents for real
With Cloud Sandboxes, devs can keep agents at arm's length
Salesforce Agentforce vulns allowed 0-click CRM data theft, anonymous phishing
'SalesBleed' security flaws 'lead to very unexpected consequences'
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions
A OnePlus 15 running the latest OxygenOS can be rooted by a malicious app the owner installs, one that asks for no special permissions. A researcher, Rasmus Moorats, chained two fl…
IP Fabric 8.1 adds application-aware mapping and cloud-native data model
Application inventories and network data typically live apart in enterprise IT. Application details sit in application performance management (APM) platforms and configuration mana…
ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories
This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. A search answer. A coding tool. A link you have clicked a hundred times before. …
Exposed GitLab project email addresses let attackers push code
Private GitLab email addresses that allow developers to push issues or tasks to a project are being deliberately exposed in READMEs, contributing guides, and support pages used to …
Meta's new AI fidget is a ... Tamagotchi?
We hope Zuck's Muse Charm doesn't die if you neglect it
LIU023: Wendell Odom – The Man Who Wrote THE Book
Renowned Cisco Press author Wendell Odom shares how he began writing the definitive guide for the CCNA exam. Alexis, Kevin, and Wendell discuss the balance between practical, on-th…
Decades-old file security flaws found in Android, Linux, macOS, and Windows
Security researchers report that Microsoft considers the side-channel leak of file events to be by design
iPhone 18 Pro benchmark boosted by giving it a cold drink
3x the vapor-chamber surface area can only do so much; luckily the fridge helped with sustained performance
CVE flood pushes Ubuntu onto weekly kernel release cycle
AI-assisted bug hunting is helping pile up vulnerabilities faster than defenders can patch them, so Canonical is picking up the pace
AI boom could wipe 230 million budget phones a year from the market
Sub-$200 shipments forecast to shrink 40% by 2030 as component costs climb