JADEPUFFER agentic ransomware used an LLM agent to breach Langflow, harvest credentials, and destroy Nacos data in minutes. Full attack chain and defense guide.

TeamPCP hackers are hijacking developer tools and CI/CD pipelines to steal cloud tokens, SSH keys, Kubernetes secrets, and package credentials. The FBI TeamPCP alert confirms the group’s TTPs and IOCs, while public research shows repeated compromise across Trivy, KICS, LiteLLM, Bitwarden CLI, and related developer tooling.

A Microsoft Edge flaw chain involving CVE-2026-45492, CVE-2026-45494, and CVE-2026-45495 creates remote code execution risk through crafted web content.

Chrome update fixes 27 security flaws, including five Critical vulnerabilities across Core, DigitalCredentials, Accessibility, GPU, and WebMIDI.

Cavern Manticore targets Israeli IT and government sectors with a modular .NET C2 framework and trusted provider supply chain access.

An AI PowerShell script mapped Active Directory in a real June 2026 attack using RDP access, stolen credentials, and custom enumeration logic.