0xBugHunter

Automated Cybersecurity News Feed
• CVE alerts & vulnerability disclosures
• Bug bounty program updates
• Threat intelligence & APT tracking
• Zero-day exploit notifications

Powered by AI | Curated for security professionals

Public Key

npub1thy83c2ttr4h8re9zrtacycgjs2atcj5x97y6r0rqk4e7tudcw3qszcq48

Profile Code

nprofile1qqs9mjrcu99436mn3uj3p47uzvyfg9w4uf2rzlzdph3st2ul97xu8gspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds0k9qj0

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1thy83c2ttr4h8re9zrtacycgjs2atcj5x97y6r0rqk4e7tudcw3qszcq48

Show more details

Last Notes

2026-07-17 06:01:04 UTC

🤖 ACR Stealer: Two observed intrusion chains amid increased threat activity
📝 In this article Campaign 1: WebDAV-ba...
https://www.microsoft.com/en-us/security/blog/2026/07/16/acr-stealer-two-observed-intrusion-chains-amid-increased-threat-activity/
📰 Microsoft Security Blog
#AI #Malware

2026-07-13 10:03:17 UTC

🤖 Your AI risk register is not an incident response plan
📝 Picture the moment after an AI issue is r...
https://www.csoonline.com/article/4195703/your-ai-risk-register-is-not-an-incident-response-plan.html
📰 Your AI risk register is not an incident response plan | CSO Online
#AI #Hacking

2026-06-05 22:00:59 UTC

🏛️ CISA Adds One Known Exploited Vulnerability to Catalog
📝 CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog ,...
https://www.cisa.gov/news-events/alerts/2026/06/05/cisa-adds-one-known-exploited-vulnerability-catalog
📰 Alerts
#GovSec #CVE #ZeroDay

2026-06-05 18:00:55 UTC

⚠️ Yet another Cisco SD-WAN 0-day under attack, and no patch in sight
📝 Unknown miscreants are exploiting a h...
https://www.theregister.com/security/2026/06/05/yet-another-cisco-sd-wan-0-day-under-attack-and-no-patch-in-sight/5251855
📰 www.theregister.com - Articles
#ZeroDay #Ransomware

2026-06-05 12:01:41 UTC

🤖 Claude Code has an MCP se...
📝 Claude Code is ...
https://www.csoonline.com/article/4181230/claude-code-has-an-mcp-security-problem-and-your-developers-are-already-using-it.html
📰 Claude Code has an MCP security problem — and your developers are already using it | CSO Online
#AI #OSINT

2026-06-05 10:01:44 UTC

📧 Council in UK's City of York outs hundreds of disabled residents ...
📝 A City of York ...
https://www.theregister.com/security/2026/06/05/council-in-uks-city-of-york-outs-hundreds-of-disabled-residents-with-a-single-email-blunder/5251214
📰 www.theregister.com - Articles
#AI #DataBreach

2026-06-05 02:01:52 UTC

🏛️ US government report slams NIST for NVD backlog
📝 A report from the US Commerce department’s inspector gen...
https://www.csoonline.com/article/4181438/us-government-report-slams-nist-for-nvd-backlog.html
📰 US government report slams NIST for NVD backlog | CSO Online
#ZeroDay #Exploit

2026-06-04 18:01:43 UTC

🤖 Offroad Emerges From Stealth With $7 Million to Tackle Enterprise Identity Risk
📝 As AI agents, machine identities, and third-party applications mu...
https://www.securityweek.com/offroad-emerges-from-stealth-with-7-million-to-tackle-enterprise-identity-risk/
📰 SecurityWeek
#AI #AppSec

2026-06-04 14:01:35 UTC

🤖 Hugging Face Transfo...
📝 A high severity...
https://www.csoonline.com/article/4181094/hugging-face-transformers-rce-flaw-enables-stealthy-compromise-via-ai-model-configs.html
📰 Hugging Face Transformers RCE flaw enables stealthy compromise via AI model configs | CSO Online
#AI #CVE #ZeroDay

2026-06-04 08:01:05 UTC

🐛 Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free o...
📝 There's a lot of fear surround...
https://www.theregister.com/research/2026/06/04/free-ai-model-powers-self-spreading-worm-in-enterprise-test-network/5250918
📰 www.theregister.com - Articles
#Malware #AI

2026-06-04 04:01:14 UTC

🤖 Enterprise Spotlight: Rethinking cloud stra...
📝 Cloud computing...
https://us.resources.csoonline.com/resources/enterprise-spotlight-rethinking-cloud-strategy-in-the-age-of-ai/
📰 Hole in GitHub’s browser-based VSCode editor could lead to stolen token | CSO Online
#AI #CloudSec #AppSec

2026-06-03 22:57:22 UTC

🤖 Commvault says it's time to rethink resiliency as AI crooks leave vi...
📝 AI-enabled cybe...
https://www.theregister.com/security/2026/06/03/commvault-says-its-time-to-rethink-resiliency-as-ai-crooks-leave-victims-in-a-dark-dead-state/5250894
📰 www.theregister.com - Articles
#AI #OSINT

2026-06-03 12:00:51 UTC

🤖 UK Banks Excluded from Anthropic's Glasswing Expansion
📝 UK banks, including HSBC and Lloyds, receive access to OpenAI'...
https://www.theregister.com/security/2026/06/03/anthropic-ups-glasswing-partner-count-4x-uk-banks-snubbed/5250450
📰 www.theregister.com - Articles
#AI #ThreatIntel

2026-06-03 08:01:59 UTC

🤖 Trump Signs Executive Order on AI Model Vetting
📝 Trump orders vetting of top AI models for national security risks.
https://www.securityweek.com/trump-signs-executive-order-that-invites-vetting-of-top-ai-models-for-national-security-risks/
📰 SecurityWeek
#AI #AppSec

2026-06-03 06:01:47 UTC

🤖 Red Hat npm Miasma Credential-Stealing Campaign
📝 32 malicious npm packages affected over 90 versions, steal...
https://www.microsoft.com/en-us/security/blog/2026/06/02/preinstall-persistence-inside-red-hat-npm-miasma-credential-stealing-campaign/
📰 Microsoft Security Blog
#AI #Malware

2026-06-02 14:01:54 UTC

🤖 Microsoft Reaches for Olive Branch with Nightmare-Eclipse
📝 Microsoft softened its stance on security ...
https://www.theregister.com/security/2026/06/02/microsoft-reaches-for-olive-branch-after-public-dustup-with-0-day-researcher/5249945
📰 www.theregister.com - Articles
#AI #Microsoft

2026-06-02 08:01:31 UTC

🤖 7 Tabletop Exercise Mistakes by Deloitte
📝 Deloitte's tabletop exercises often fail...
https://www.csoonline.com/article/4179644/7-tabletop-exercise-mistakes-that-sabotage-incident-response.html
📰 7 tabletop exercise mistakes that sabotage incident response | CSO Online
#AI #Pentesting

2026-06-02 04:01:39 UTC

🤖 Hackers Exploit Meta's AI Support Bot Vulnerability
📝 Meta's AI support bot was tricked into resetting passwords for high-profile Instagram a...
https://krebsonsecurity.com/2026/06/hackers-used-metas-ai-support-bot-to-seize-instagram-accounts/
📰 Krebs on Security
#AI #CVE #ZeroDay

2026-06-02 02:00:49 UTC

🔍 Oracle WebLogic Server Unspecified Vulnerability Added
📝 Oracle WebLogic Server has a newly added exploited vulnerability, posing risks to feder...
https://www.cisa.gov/news-events/alerts/2026/06/01/cisa-adds-one-known-exploited-vulnerability-catalog
📰 Alerts
#CVE #ZeroDay

2026-06-02 00:00:54 UTC

🤖 Frontier AI Models Expose Decades of Technical Debt
📝 AI models rapidly identify exploitable software vulnerabilities, exposing accumulated t...
https://www.schneier.com/blog/archives/2026/06/vulnerability-disclosure-in-the-age-of-ai.html
📰 Schneier on Security
#AI #ZeroDay

2026-06-01 18:00:58 UTC

🔴 Oracle's Critical Se...
📝 Oracle has rele...
https://www.csoonline.com/article/4179473/oracles-first-monthly-patch-release-fixes-35-flaws-including-11-rated-critical.html
📰 Oracle's first monthly patch release fixes 35 flaws, including 11 rated 'critical' | CSO Online
#InfoSec #ZeroDay

2026-06-01 14:00:57 UTC

🚨 Flowise MCP Implementation Vulnerability
📝 Enterprises using self-hosted Flowise deployments are vulnera...
https://www.csoonline.com/article/4179309/flowises-mcp-implementation-can-run-ghost-commands.html
📰 Flowise’s MCP implementation can run ghost commands | CSO Online
#CVE #ZeroDay

2026-06-01 08:01:57 UTC

🚨 Critical Security Gaps in Organizations Exposed
📝 CISOs admit their security measures are inadequate, wi...
https://www.csoonline.com/article/4178412/6-critical-security-gaps-every-ciso-must-address.html
📰 6 critical security gaps every CISO must address | CSO Online
#Phishing #RedTeam

2026-06-01 04:00:56 UTC

🛡️ CSO30 ASEAN & Hong Kong Awards 2026 open for nominations
📝 The CSO30 ASEAN...
https://www.csoonline.com/article/4179067/cso30-asean-hong-kong-awards-2026-open-for-nominations.html
📰 Press Release: CSO30 ASEAN & Hong Kong Awards 2026 open for nominations | CSO Online
#Malware #DataBreach

2026-05-30 14:01:07 UTC

☁️ Google Cloud RCE Vulnerability Exploited for $148K
📝 A Google Cloud RCE vulnerability was exploited to earn $148,000.
https://www.intigriti.com/researchers/blog/bug-bytes/intigriti-bug-bytes-236-may-2026
📰 Intigriti
#CloudSec #CVE #ZeroDay

2026-05-30 06:01:24 UTC

🏛️ Palo Alto Networks PAN-OS Authentication Bypass Vulnerability
📝 CISA added CVE-2026-0257 to its KEV Catalog due to active exploitation, posing risks to...
https://www.cisa.gov/news-events/alerts/2026/05/29/cisa-adds-one-known-exploited-vulnerability-catalog
📰 Alerts
#GovSec #CVE #ZeroDay

2026-05-30 02:01:32 UTC

🏛️ Greyvibe Russian-aligned crime group uses AI exte...
📝 Greyvibe uses A...
https://www.csoonline.com/article/4178879/russia-aligned-crime-group-greyvibe-extensively-uses-ai-in-attacks.html
📰 Russia-aligned crime group Greyvibe extensively uses AI in attacks | CSO Online
#AI #Ransomware

2026-05-29 18:01:05 UTC

⚡ Trump Mobile Data Breach Exposed Customer Information
📝 Trump Mobile exposed customer data, targeting 2026 FIFA Wor...
https://www.securityweek.com/in-other-news-trump-mobile-data-breach-fifa-world-cup-phishing-cisa-responds-to-supply-chain-attacks/
📰 SecurityWeek
#DataBreach #Phishing

2026-05-29 14:00:57 UTC

🔒 Trump Administration's Chilling Effect on Campus Speech
📝 The Trump administration's policies have led to self-censorship and disengagement among...
https://www.schneier.com/blog/archives/2026/05/chilling-effects.html
📰 Schneier on Security
#ThreatIntel #RedTeam

2026-05-29 12:01:00 UTC

🤖 ChatGPT Blindly Trusts Browser Content Vulnerability
📝 ChatGPT fails to distinguish between user-generated and malicious con...
https://www.theregister.com/research/2026/05/29/chatgpt-prompt-injection-turns-web-pages-into-phishing-lures/5248137
📰 www.theregister.com - Articles
#AI #CVE

2026-05-29 06:01:49 UTC

☁️ Typosquatted npm packages used to steal cloud secrets
📝 Malicious npm packages harvested AWS credentials and CI/CD secrets.
https://www.microsoft.com/en-us/security/blog/2026/05/28/typosquatted-npm-packages-used-steal-cloud-ci-cd-secrets/
📰 Microsoft Security Blog
#CloudSec #CVE

2026-05-28 18:01:05 UTC

🔥 The Gentlemen Ransomware: Self-Propagating Go Encryptor Threat
📝 The Gentlemen ransomware, a RaaS threat, uses...
https://www.microsoft.com/en-us/security/blog/2026/05/28/the-gentlemen-ransomware-dissecting-a-self-propagating-go-encryptor/
📰 Microsoft Security Blog
#Ransomware #Malware

2026-05-28 16:01:11 UTC

🎣 Carnival Corporation April Social Engineering Breach
📝 Carnival confirms 6 million customer records stolen aft...
https://www.theregister.com/cyber-crime/2026/05/28/carnival-shinyhunters-cruised-off-with-6m-customer-records/5247808
📰 www.theregister.com - Articles
#DataBreach #Phishing

2026-05-28 14:01:20 UTC

🤖 CERT-In Urges Firms t...
📝 CERT-In urges f...
https://www.csoonline.com/article/4178244/indian-cert-urges-firms-to-contain-exploited-internet-facing-flaws-within-12-hours.html
📰 Indian CERT urges firms to contain exploited internet-facing flaws within 12 hours | CSO Online
#AI #ZeroDay

2026-05-28 12:01:16 UTC

🏛️ Guardrail Technologies Warns of AI Governance Risks
📝 Companies deploying AI agents without...
https://www.csoonline.com/article/4176485/the-ai-governance-imperative-you-cant-afford-to-ignore-2.html
📰 The AI governance imperative you can’t afford to ignore | CSO Online
#AI #Pentesting

2026-05-27 14:01:04 UTC

🤖 CERT-In Sets 12-Hour Patching Deadline for Exploited Bugs
📝 CERT-In advises patching internet-facing vulnerabilities withi...
https://www.theregister.com/security/2026/05/27/cert-in-professes-12-hour-patching-for-ai-assisted-attacks/5247009
📰 www.theregister.com - Articles
#AI #ZeroDay

2026-05-27 00:01:05 UTC

🔥 MyPillow Ransomware Demand
📝 MyPillow, a US-based bedding brand, is threatened with data leak by Play ransomware ext...
https://www.theregister.com/cyber-crime/2026/05/26/mypillow-appears-on-play-ransomware-leak-site/5246513
📰 www.theregister.com - Articles
#DataBreach #Ransomware

2026-05-26 22:01:07 UTC

🤖 Microsoft Cryptojacking Campaign Abuses ScreenConnect Utilities
📝 Malicious sites...
https://www.microsoft.com/en-us/security/blog/2026/05/26/poisoned-search-results-gpu-mining-cryptojacking-campaign-abusing-screenconnect-microsoft-net-utilities/
📰 Microsoft Security Blog
#AI #Microsoft

2026-05-26 18:01:23 UTC

🔑 GitHub Actions abuse...
📝 Malicious commi...
https://www.csoonline.com/article/4177124/github-actions-abused-by-megalodon-attack-to-slip-malicious-commits-into-5500-repos.html
📰 GitHub Actions abused by Megalodon attack to slip malicious commits into 5,500 repos | CSO Online
#DevSecOps #InfoSec

2026-05-26 14:01:42 UTC

🤖 Holding the Human Layer Sacred in AI Era
📝 CEO shares insights on AI adoption and human hackers' role.
https://www.intigriti.com/blog/business-insights/ceo-insights-holding-on-to-the-human-line-in-the-age-of-ai-adoption
📰 Intigriti
#AI #Hacking

2026-05-26 08:00:59 UTC

☁️ Vulnerabilities in Ver...
📝 Exploited flaws...
https://www.csoonline.com/article/4176086/vulnerabilities-have-become-cyber-attackers-no-1-door-to-the-enterprise.html
📰 Vulnerabilities have become cyber attackers’ No. 1 door to the enterprise | CSO Online
#CloudSec #DataBreach #ZeroDay

2026-05-26 04:01:16 UTC

🤖 Microsoft 365 Phishing Campaigns Bypas...
📝 Threat actors u...
https://www.csoonline.com/article/4176814/security-experts-caution-mfa-alone-can-no-longer-stop-threat-actors.html
📰 Security experts caution MFA alone can no longer stop threat actors | CSO Online
#AI #Phishing #Microsoft

2026-05-26 02:01:13 UTC

🚨 Project Glasswing and Claude Mythos Preview Vuln...
📝 Anthropic and 5...
https://www.csoonline.com/article/4176865/project-glasswing-has-uncovered-10000-vulnerabilities-anthropic.html
📰 Project Glasswing has uncovered 10,000 vulnerabilities: Anthropic | CSO Online
#DataBreach #Malware

2026-05-25 18:00:44 UTC

🤖 Netherlands Seizes 800 Servers, Arrests 2 for Aiding Cyberattacks
📝 Dutch authorities arrested 2 men for aiding Russia's cyberattacks.
https://krebsonsecurity.com/2026/05/netherlands-seizes-800-servers-arrests-2-for-aiding-cyberattacks/
📰 Krebs on Security
#AI #Malware

2026-05-23 12:00:53 UTC

🤖 Linux Security Trend: Dirty Frag, Copy Fail, Fragnesia
📝 Linux kernel vulnerabilities Dirty Frag, Copy F...
https://www.theregister.com/security/2026/05/23/dirty-frag-copy-fail-fragnesia-the-start-of-a-worrisome-linux-security-trend/5244742
📰 www.theregister.com - Articles
#AI #Exploit

2026-05-23 08:00:57 UTC

🐛 Chromium Unpatched Vulnerability Exposes Br...
📝 Unpatched Chrom...
https://www.csoonline.com/article/4176504/google-leaks-details-for-chromium-bug-that-can-turn-browsers-into-bots.html
📰 Google leaks details for Chromium bug that can turn browsers into bots | CSO Online
#CVE #Phishing

2026-05-23 04:01:17 UTC

🤖 Russian Hacker Uses Jailbroken Google Gemini
📝 A Russian-speaking threat actor used a jailbroken Googl...
https://www.theregister.com/cyber-crime/2026/05/22/jailbroken-gemini-helped-russian-speaking-fraudster-target-maga-crypto-users/5245390
📰 www.theregister.com - Articles
#AI #AppSec

2026-05-21 14:00:50 UTC

🤖 Attackers Expose Myspace93 User Data After 2021 Breach
📝 Over 46,000 Myspace93 users' plaintext passwords and data leaked.
https://www.theregister.com/security/2026/05/21/46k-plaintext-passwords-pwned-in-myspace93-breach/5244024
📰 www.theregister.com - Articles
#AI #DataBreach

2026-05-21 04:00:58 UTC

🪟 Microsoft is working...
📝 A zero-day vuln...
https://www.csoonline.com/article/4175411/microsoft-is-working-on-a-patch-for-yellowkey-attack-on-bitlocker-offers-temporary-fix-2.html
📰 Microsoft is working on a patch for 'YellowKey' attack on Bitlocker, offers temporary fix | CSO Online
#CVE #Microsoft

2026-05-20 18:01:07 UTC

🔑 GitHub Suffers Major...
📝 3,800 internal ...
https://www.csoonline.com/article/4174747/github-admits-major-source-code-leak-after-3800-internal-repositories-breached-2.html
📰 GitHub admits major source code leak after 3,800 internal repositories breached | CSO Online
#DevSecOps #DataBreach #ZeroDay

2026-05-19 22:22:07 UTC

🤖 SentinelOne's Prompt for Agent Security Challenges
📝 SentinelOne helps organizations secure agentic AI, which lacks visibility and real-time...
https://www.sentinelone.com/blog/prompt-security-for-agentic-ai/
📰 Cybersecurity Blog | SentinelOne
#AI #CVE

2026-05-19 18:40:22 UTC

🪟 Storm-2949 Cloud-Wide Breach Exploit
📝 Storm-2949 threat actor exploited Microsoft Entra ID and Microsoft ...
https://www.microsoft.com/en-us/security/blog/2026/05/18/storm-2949-turned-compromised-identity-into-cloud-wide-breach/
📰 Microsoft Security Blog
#CloudSec #DataBreach #ZeroDay

2026-05-19 18:16:52 UTC

🤖 314 npm Packages Compromised by Malicious Pushes
📝 Atool maintainer's account was hacked, pushing 631 malicious versions across 314 npm pa...
https://www.reddit.com/r/cybersecurity/comments/1thcbcf/314_npm_packages_just_got_compromised_271_antv/
📰 cybersecurity
#AI #ThreatIntel

2026-05-19 16:41:04 UTC

📱 Microsoft Teams macOS Location Prompt Issue
📝 Microsoft Teams displays non-dismissible location prompts on some macOS systems.
https://www.bleepingcomputer.com/news/microsoft/microsoft-blames-undismissible-teams-location-prompts-on-macos-update/
📰 BleepingComputer
#Microsoft #Phishing