Skip to main content

Daily intelligence

AI & security, curated for you.

The developments that actually matter for your business — pulled daily from the sources we trust, with our take on why each one counts. We link you straight to the source.

Updated daily · curated by ThinkOpen

Security

BleepingComputerJun 11

Max severity Ivanti Sentry vulnerability now exploited in attacks

A max-severity Ivanti Sentry flaw now being exploited in the wild gives attackers root access to your mobile gateway — patch or isolate now.

Read at BleepingComputer→
BleepingComputerJun 10

China-linked JDY botnet expands targeting of U.S. military networks

A China-linked botnet targeting U.S. military networks is expanding reconnaissance, and its SOHO-device focus puts small business infrastructure directly in scope.

Read at BleepingComputer→
Krebs on SecurityJun 10

Who Runs the Ransomware Group ‘The Gentlemen?’

A fast-rising ransomware group offering affiliates 90% payouts is accelerating recruitment and attack volume, raising risk for SMB targets.

Read at Krebs on Security→
BleepingComputerJun 10

Microsoft patches Exchange Server zero-day exploited in attacks

An actively exploited Exchange Server zero-day lets attackers run malicious code through Outlook Web Access — patch immediately if you run on-prem Exchange.

Read at BleepingComputer→
BleepingComputerJun 10

Microsoft patches YellowKey, GreenPlasma, MiniPlasma zero-days

Two actively exploitable Windows privilege-escalation zero-days and a BitLocker bypass were just patched — unpatched systems are at real risk.

Read at BleepingComputer→
The Hacker NewsJun 10

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

A record 206 Microsoft patches including 3 zero-days and 39 critical flaws means your IT team must prioritize this update cycle immediately.

Read at The Hacker News→
BleepingComputerJun 9

Microsoft Defender 'RoguePlanet' zero-day grants SYSTEM privileges

A new Defender zero-day exploit dropped publicly the same day as Patch Tuesday, meaning attackers have a working tool before most businesses have patched.

Read at BleepingComputer→
BleepingComputerJun 9

ServiceNow discloses security incident exposing customer data

If your business uses ServiceNow, customer data may have been accessed through an unauthenticated API flaw exploited before the patch was applied.

Read at BleepingComputer→
Dark ReadingJun 9

Microsoft Exchange Flaw Lets Attackers Spoof Any Email Address

A Microsoft Exchange flaw lets attackers send spoofed email from any address, making phishing and business email compromise significantly easier to pull off.

Read at Dark Reading→
The Hacker NewsJun 9

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

A CVSS 9.4 Veeam Backup flaw lets domain users execute remote code — backup servers are high-value targets and need immediate patching.

Read at The Hacker News→
The Hacker NewsJun 9

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now

An actively exploited Chrome zero-day rated 8.8 means every employee using Chrome needs this patch applied immediately.

Read at The Hacker News→
BleepingComputerJun 9

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

A Check Point VPN zero-day actively used by Qilin ransomware affiliates puts any business using that product at direct risk.

Read at BleepingComputer→
Dark ReadingJun 8

Silent Ransom Group Hits US Law Firms in Escalating Extortion Attacks

Law firms and service businesses are being targeted with phone-based impersonation and physical office intrusions to steal and extort.

Read at Dark Reading→
BleepingComputerJun 8

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Compromised PyPI packages downloaded hundreds of thousands of times can silently steal developer credentials from your software supply chain.

Read at BleepingComputer→
The Hacker NewsJun 8

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

A public exploit for a Linux kernel root-escalation flaw threatens any server or container running an unpatched Linux build.

Read at The Hacker News→
BleepingComputerJun 8

Critical UniFi OS bug lets hackers gain root without authentication

A chained, unauthenticated root-access bug in widely deployed Ubiquiti UniFi gear demands immediate patching across office networks.

Read at BleepingComputer→
BleepingComputerJun 8

Oxford University discloses data breach after careers platform hack

Third-party platform breaches remind SMBs that vendor access to your data is your liability too.

Read at BleepingComputer→
The Hacker NewsJun 8

UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign

Professional and legal services firms are actively being hit with vishing and extortion campaigns right now.

Read at The Hacker News→
BleepingComputerJun 8

Over 20,000 Instagram accounts stolen in Meta AI support hack

Attackers hijacked 20,000+ accounts by abusing an AI support system — a warning about AI-assisted social engineering.

Read at BleepingComputer→
BleepingComputerJun 7

C0XMO botnet spreads via DD-WRT router flaw, kills rival malware

Router-targeting botnets exploiting firmware flaws can compromise your network perimeter without warning.

Read at BleepingComputer→
BleepingComputerJun 7

Silent Ransom Group targets law firms with fake IT support calls

Law firms and professional services are prime targets — fake IT support calls are leading to rapid data theft.

Read at BleepingComputer→
BleepingComputerJun 6

Critical Everest Forms Pro flaw exploited to take over WordPress sites

Actively exploited WordPress plugin flaw lets attackers take full site control — patch Everest Forms Pro immediately.

Read at BleepingComputer→
The Hacker NewsJun 6

New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration

ChatGPT's new Lockdown Mode reduces the risk that sensitive business data leaks through AI prompt injection attacks.

Read at The Hacker News→
The Hacker NewsJun 6

CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog

Actively exploited SolarWinds Serv-U flaw means any org running that file server should patch or isolate it immediately.

Read at The Hacker News→

AI

MIT Technology ReviewJun 11

Google DeepMind is worried about what happens when millions of agents start to interact

Google DeepMind is funding safety research into mass AI-agent interaction risks, signaling that multi-agent deployments carry emerging, underappreciated dangers.

Read at MIT Technology Review→
BleepingComputerJun 10

Path traversal flaw in AI dev platform Langflow exploited in attacks

An actively exploited vulnerability in the popular Langflow AI development platform means any team using it for internal tools needs to patch or take it offline now.

Read at BleepingComputer→
Dark ReadingJun 10

AI Risk Worries Insurers and Businesses Alike

Insurers are actively excluding AI-related risks from coverage, meaning businesses adopting AI tools may have unexpected gaps in their cyber policies.

Read at Dark Reading→
TechCrunch AIJun 10

‘AI-pilled’ firms spend $7,500 per employee each month on AI

Benchmark data on AI spending per employee helps SMB leaders reality-check their own AI budgets against what high-adoption peers are actually committing.

Read at TechCrunch AI→
TechCrunch AIJun 10

How memory tools can make AI models worse

New research shows AI memory tools can actually degrade accuracy and increase sycophancy, a practical red flag for businesses deploying AI assistants.

Read at TechCrunch AI→
The Hacker NewsJun 10

Anthropic Releases Claude Fable 5, Its Most Powerful AI Yet, With Cyber Safeguards

Anthropic's most capable model ships in two versions — one public with safety guardrails, one restricted — setting a new benchmark for AI capability and risk management.

Read at The Hacker News→
The NeuronJun 9

Anthropic's Managed Agents, Explained (Meet Claude's Agent Platform)

Anthropic's managed agent platform enables businesses to deploy autonomous Claude agents — understanding its capabilities and limits matters before adoption.

Read at The Neuron→
BleepingComputerJun 9

OpenClaw AI agent found falling for phishing attacks, spills user data

AI email agents can be socially engineered just like humans, exposing user data — businesses deploying AI agents need to account for this attack surface.

Read at BleepingComputer→
TechCrunch AIJun 9

WWDC 2026: Everything announced on Siri AI, iOS 27, Apple Intelligence, and more

Apple's iOS 27 and expanded Siri AI features will affect how your employees use company-connected devices starting this fall.

Read at TechCrunch AI→
Microsoft SecurityJun 9

Reconstructing AI activity in investigations

Microsoft's playbook for investigating AI activity in Copilot and Azure helps security teams detect data exposure before it becomes a breach.

Read at Microsoft Security→
The Hacker NewsJun 9

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

A self-replicating AI worm that reasons through networks signals that AI-powered attacks are moving from theory to real threat.

Read at The Hacker News→
MIT Technology ReviewJun 9

Learning to lead in a hybrid human-AI enterprise

AI agents are projected to surge 300% in two years, and leaders need a strategy for managing hybrid human-AI workflows now.

Read at MIT Technology Review→
MIT Technology ReviewJun 9

Five things you need to know about AI

A concise expert summary of the biggest AI trends helps business leaders cut through noise and focus on what actually matters.

Read at MIT Technology Review→
The NeuronJun 8

MIT's new AI risk study says the public is exposed and developers are responsible

An MIT study placing accountability on AI developers has direct implications for how SMBs should evaluate vendor liability and risk.

Read at The Neuron→
Wired AIJun 8

Meta Deletes Face-Recognition System From Its Smart Glasses App After WIRED Report

Meta quietly removed face-recognition code from its smart glasses app, highlighting privacy risks in AI-enabled consumer hardware used by staff.

Read at Wired AI→
Microsoft SecurityJun 8

AI brands as bait: How threat actors are using the AI hype in social engineering

Attackers are now using AI brand names as phishing lures, making employees who trust AI tools a new high-value target.

Read at Microsoft Security→
The NeuronJun 8

😺ChatGPT is about to look completely different

ChatGPT's interface is being redesigned — businesses relying on it daily should expect workflow adjustments ahead.

Read at The Neuron→
The Hacker NewsJun 8

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

VS Code's update delay gives security teams a window to catch malicious extension updates before they reach developers.

Read at The Hacker News→
BleepingComputerJun 7

Hands on with Intelligent Terminal, an AI-powered Windows Terminal

Microsoft's AI-native terminal brings productivity automation to developers without disrupting existing workflows.

Read at BleepingComputer→
TechCrunch AIJun 7

OpenAI is still working on that ‘super app’

OpenAI's move toward an all-in-one super app signals a shift in how AI tools may be consolidated for business users.

Read at TechCrunch AI→
TechCrunch AIJun 6

OpenAI unveils Lockdown Mode to protect sensitive data from prompt injection attacks

Lockdown Mode is a concrete tool for businesses that need tighter control over what ChatGPT shares or acts on.

Read at TechCrunch AI→
The Hacker NewsJun 6

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

Free apps are silently turning employee devices into traffic-relay nodes for AI data brokers — a hidden privacy and liability risk.

Read at The Hacker News→

Cloud

BleepingComputerJun 11

Microsoft fixes BitLocker recovery bug on Windows Server 2025

A Microsoft patch triggered BitLocker recovery loops on Windows Server 2025 — verify your servers rebooted cleanly after the April update cycle.

Read at BleepingComputer→
BleepingComputerJun 10

Microsoft: Some Windows PCs fail to install latest monthly updates

Some Windows 11 devices are failing to install June Patch Tuesday updates, meaning you may believe you're patched when you're not.

Read at BleepingComputer→
The Hacker NewsJun 9

Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

A supply chain attack compromised 73 Microsoft GitHub repositories, potentially injecting malware into open-source code many businesses depend on.

Read at The Hacker News→
The Hacker NewsJun 9

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

An actively exploited RCE vulnerability in LiteLLM — a popular AI API gateway — puts cloud-connected AI deployments at serious risk.

Read at The Hacker News→
BleepingComputerJun 8

Gogs patches critical zero-day enabling remote code execution

A critical zero-day in Gogs allows unauthenticated remote code execution, exposing any self-hosted or cloud git repositories to takeover.

Read at BleepingComputer→
The Hacker NewsJun 8

VerdantBamboo Deploys BSD Variant of BRICKSTORM on Linux Appliances

China-linked espionage malware targeting Linux appliances poses real risk to hybrid and cloud-connected infrastructure.

Read at The Hacker News→
TechCrunch AIJun 7

Notion restores access to Anthropic after service disruption

A Notion-Anthropic outage shows that AI-integrated SaaS tools carry availability risk worth factoring into continuity plans.

Read at TechCrunch AI→

Compliance

BleepingComputerJun 11

Coupang hit with record $409 million data breach fine in Korea

A $409M fine for a single breach reinforces that regulators globally are escalating data-protection enforcement — even SMBs face serious liability exposure.

Read at BleepingComputer→
Dark ReadingJun 10

CISA Rewrites Federal Patching Requirements for AI Threat Era

CISA's new directive mandating three-day patch windows for critical flaws sets a benchmark that cyber-insurers and auditors are likely to adopt for private-sector expectations.

Read at Dark Reading→
CISA AdvisoriesJun 9

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA's addition of three actively exploited CVEs to its catalog creates a compliance deadline — federal contractors and cyber-insurance holders need to act quickly.

Read at CISA Advisories→
Wired AIJun 8

OpenAI Confidentially Files for IPO on the Heels of SpaceX and Anthropic

OpenAI filing for IPO signals increased regulatory scrutiny of AI vendors, which will affect contract terms and compliance expectations for customers.

Read at Wired AI→
The Hacker NewsJun 8

Critical Check Point VPN Flaw Exploited to Bypass Passwords in IKEv1 Setups

A CVSS 9.3 Check Point VPN flaw tied to ransomware attacks may trigger cyber-insurance reporting obligations for affected businesses.

Read at The Hacker News→
TechCrunch AIJun 7

Is this the dawn of the Tokenpocalypse?

Rising AI service costs as major providers pursue IPOs could materially affect your AI tool budgets and contracts.

Read at TechCrunch AI→
TechCrunch AIJun 6

The Trump administration might take an equity stake in OpenAI

Government equity involvement in OpenAI could bring regulatory and policy changes affecting how businesses use AI tools.

Read at TechCrunch AI→