Keamanan Siber

A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw

A Malicious Webpage Could Poison Your Local AI Model Be...

Aug 25, 2026 0 10

NVIDIA NemoClaw's Windows-host Ollama path exposes an unauthenticated API that D...

WhatsApp Adds Multiple Passkeys for Phishing-Resistant Sign-Ins Across iOS and Android

WhatsApp Adds Multiple Passkeys for Phishing-Resistant ...

Aug 25, 2026 0 14

WhatsApp adds multiple passkeys per account, full-password two-step verification...

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Attackers Target miniOrange SAML Flaws That Can Grant W...

Aug 25, 2026 0 6

Attackers are scanning for two miniOrange SAML flaws, including CVE-2026-15981, ...

Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

Weedhack Malware Spreads via Fake Minecraft Clients and...

Aug 25, 2026 0 23

Weedhack spreads through fake Minecraft client sites and SEO poisoning, with McA...

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

WordlistLoader Delivers Amatera via ClickFix, SynkLoade...

Aug 24, 2026 0 14

WordlistLoader delivers Amatera via ClearFake ClickFix attacks, while SynkLoader...

Critical Keycloak Password Reset Flaw Could Let Unauthenticated Attackers Take Over Any Account

Critical Keycloak Password Reset Flaw Could Let Unauthe...

Aug 24, 2026 0 14

Keycloak CVE-2026-18963 could let unauthenticated attackers skip the emailed act...

Why Threat Intelligence Needs OT Context to Protect Critical Infrastructure

Why Threat Intelligence Needs OT Context to Protect Cri...

Aug 24, 2026 0 11

OMICRON Threat Intelligence correlates OT vulnerabilities, assets, and 300+ prot...

GitLab CVE-2026-19478 Comes Under Active Exploitation Within Days of Disclosure

GitLab CVE-2026-19478 Comes Under Active Exploitation W...

Aug 21, 2026 0 5

GitLab CVE-2026-19478 is under active exploitation, with unauthenticated attacks...

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, Allows Remote Code Execution

Microsoft Entra ID Flaw (CVSS 10.0) Exploited in Wild, ...

Aug 21, 2026 0 21

Microsoft says CVE-2026-69836, a CVSS 10.0 Entra ID RCE flaw, has been exploited...

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Re...

Aug 21, 2026 0 11

ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit ...

AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

AI-Generated Exploit Scripts Target Siemens S7 PLCs in ...

Aug 21, 2026 0 8

U.S. agencies warn AI-generated exploit scripts target Siemens S7 PLCs, with exp...

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

Elementor Pro Flaw Could Let Unauthenticated Attackers ...

Aug 20, 2026 0 9

Elementor Pro CVE-2026-32475 lets unauthenticated attackers bypass file checks a...

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

OpenAI Pauses Frontier RL Training as It Tightens Defen...

Aug 20, 2026 0 13

OpenAI pauses frontier RL training for two weeks, keeps its largest planned run ...

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Hackers Compromised 14,500+ Dahua Devices Using Credent...

Aug 19, 2026 0 11

Researchers say Operation CameraSwarm compromised 14,530+ Dahua devices using cr...

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Critical macOS, SharePoint, vCenter, and Microsoft IKE ...

Aug 19, 2026 0 9

CISA adds four critical flaws to KEV after active exploitation, with FCEB agenci...

Microsoft Ungkap 30+ Domain Rotasi Terkait Infrastruktur MacSync Stealer

Microsoft Ungkap 30+ Domain Rotasi Terkait Infrastruktu...

Aug 19, 2026 0 10

Microsoft mengaitkan lebih dari 30 domain rotasi dengan infrastruktur MacSync St...