Escaping Claude Cowork’s local VM sandbox via CVE-2026-46331

A joint operation involving Google has disrupted NetNut, a residential proxy network that gave access to millions of compromised Android devices, including smart TVs and streaming boxes. Also known as Popa, the NetNut botnet allowed cybercriminals and espionage groups to hide behind legitimate home internet addresses when launching attacks. According to the Google Threat Intelligence…

More than one new ransomware group is appearing every week as the criminal ecosystem surrounding extortion attacks becomes increasingly more fragmented and continues to expand.   Published on July 21, the Black Kite Ransomware Report 2026 identified 146 active ransomware groups which have publicly announced at least one victim of an attack, as of June…

submitted by /u/Cartoon_King_1 [comments]

submitted by /u/ShufflinMuffin [comments]

Shamis & Gentile P.A., one of the nation’s premier class action law firms specializing in data breach cases, is investigating the ASP Unifrax Holdings, Inc. dba Alkegen data breach. If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation. About Alkegen…

Two of OpenAI’s frontier artificial intelligence models acted of their own accord to breach the systems of Hugging Face, the AI software development company. In a blog post disclosing the incident, published on July 21, OpenAI claimed that a combination of its models, including GPT‑5.6 Sol and an unspecified pre-release model resulted in what the…