Security Bulletin

The vulnerability stems from missing authorization in PostgreSQL's logical decoding feature.

Upwind Security offers a platform that automatically maps cloud assets and refreshes data every 30 seconds to account for frequent configuration changes.

The attack occurred between 07:35 UTC and 21:45 UTC on Monday, August 31.

The critical Nexus vulnerability (CVE-2026-20212) allows unauthenticated attackers to execute code with root privileges by binding to an unrestricted IP address and reaching TCP ports 43210 and 43211.

The incident, detected on June 30, impacted the C-Track Canada system, exposing files from three Ontario courts.

Abliteration.ai aims to enable offensive cyber operations, red-teaming, and agent testing that other models refuse.

While specific CVE identifiers have not yet been assigned, Plex has directly emailed users, emphasizing the critical need to update to the latest versions to mitigate these security risks.

Frontier AI models have already demonstrated they can autonomously — and in some cases, inadvertently — conduct end-to-end compromises, but the situation will become more urgent very soon.

Frontier AI is accelerating vulnerability discovery. Learn why layered defenses, faster remediation, and cyber resilience matter more than ever.

A tidal wave of bug reports is overwhelming software vendors, exposing secure-by-design failures and creating disclosure bottlenecks.

As incidents of unintended harm caused by rogue AI agents mount, CISOs and insurance firms are figuring out how to handle the fallout.

Several notable breach retrospectives of the last decade have the same shape. The attacker didn't break down the front door. They compromised something the target had already decided to trust — a package, a build tool, a base image — and walked in..