Security Bulletin

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

AI development and cybersecurity are on a collision course. Here's why the inevitable crash could be better for both.

Barely three days after disclosure, attackers are widely chaining together CVE-2026-60137 and CVE-2026-63030 to lob exploit attempts against one of the largest attack surfaces on the Internet.

The guide, developed by Prophet Security in collaboration with former Gartner analysts, addresses the high failure rate of enterprise AI projects in production, estimated between 80% and 95%.

The LG Monitor App Installer, identified by YouTube channel Gamers Nexus, installs automatically when a compatible LG monitor is connected to a Windows PC.

Hugging Face turned to an open-weight model after being restricted by frontier model guardrails.

South Korea's proposed legislation seeks to amend the Criminal Procedure Act to accommodate the seizure of digital assets held in self-custody wallets, such as hardware wallets.

HollowGraph, believed to be part of the Cavern command-and-control framework, targets organizations in Israel for espionage purposes.

The incident involved an unidentified threat actor accessing Ecopetrol's IT infrastructure and exfiltrating pseudonymous data from 3,300 user accounts.

The breach, which occurred on July 20, saw a significant volume of file names viewed and exfiltrated by unauthorized individuals.

The vulnerability, with a CVSS score of 9.2, allows an unauthenticated attacker to trigger a heap buffer overflow by sending specially crafted HTTP requests.

Ivanti CSO Daniel Spicer says frontier models have shown surprising effectiveness in early stages; but cost and human-in-the-loop viability remain open questions.