Security Bulletin

The implant, identified by Rapid7 Labs with medium confidence as originating from North Korean state-sponsored actors, targets entities in South Korea's automotive and media sectors.

The vulnerability stems from missing authorization in PostgreSQL's logical decoding feature.

Upwind Security offers a platform that automatically maps cloud assets and refreshes data every 30 seconds to account for frequent configuration changes.

The attack occurred between 07:35 UTC and 21:45 UTC on Monday, August 31.

The critical Nexus vulnerability (CVE-2026-20212) allows unauthenticated attackers to execute code with root privileges by binding to an unrestricted IP address and reaching TCP ports 43210 and 43211.

The incident, detected on June 30, impacted the C-Track Canada system, exposing files from three Ontario courts.

Abliteration.ai aims to enable offensive cyber operations, red-teaming, and agent testing that other models refuse.

While specific CVE identifiers have not yet been assigned, Plex has directly emailed users, emphasizing the critical need to update to the latest versions to mitigate these security risks.

Frontier AI models have already demonstrated they can autonomously — and in some cases, inadvertently — conduct end-to-end compromises, but the situation will become more urgent very soon.

Frontier AI is accelerating vulnerability discovery. Learn why layered defenses, faster remediation, and cyber resilience matter more than ever.

A tidal wave of bug reports is overwhelming software vendors, exposing secure-by-design failures and creating disclosure bottlenecks.