RC RANDOM CHAOS

The Wire

Curated cybersecurity and tech news — AI-summarized, source attributed.

vulnerabilitycybersecurity

Second Microsoft Defender zero-day PoC drops as researcher protests MSRC treatment

A researcher going by "Chaotic Eclipse" has released a proof-of-concept for "RedSun," a local privilege escalation zero-day in Microsoft Defender that yields SY

via BleepingComputer ·
aiopen-source

Simon Willison uses Claude Artifacts to build a YAML preview tool for Datasette news

The datasette.io news section is driven by a news.yaml file in the project's GitHub repository, where each entry combines a date with a markdown body. Editing r

via Simon Willison ·
privacycybersecurity

Taboola Widgets on Banking Sites Leak Authenticated Session Data to Temu

A tracking chain embedded in Taboola's recommendation widgets is forwarding authenticated user signals from banking portals to Temu's ad infrastructure. Logged-

via The Hacker News ·
cybersecurityvulnerability

ThreatsDay: Defender 0-day, SonicWall brute-force campaign, 17-year-old Excel RCE surface

A cluster of active threats hit simultaneously this week. A zero-day in Microsoft Defender is being exploited in the wild, while SonicWall appliances face a coo

via The Hacker News ·
cybersecuritymalware

Turkish Homes and SMBs Hit by Six-Year Ransomware Campaign

A long-running ransomware operation has been quietly targeting Turkish households and small-to-medium businesses for six years, according to Dark Reading. The s

via Dark Reading ·
cybersecurityidentity

Two-Factor Authentication Moves Beyond the Desktop

Two-factor authentication is shifting away from its traditional desktop-bound implementations as organizations adopt mobile-first and device-agnostic approaches

via Dark Reading ·
malwareidentity

108 Malicious Chrome Extensions Caught Harvesting Google and Telegram Credentials

Security researchers at Socket have uncovered a coordinated campaign of over 100 malicious Chrome Web Store extensions designed to steal OAuth tokens, hijack ac

via BleepingComputer ·
aitech-culture

Adobe Launches AI Assistant That Orchestrates Workflows Across Creative Cloud Apps

Adobe is rolling out Firefly AI Assistant, a chat-based interface that can coordinate complex, multi-step projects spanning Photoshop, Illustrator, Premiere, an

via Ars Technica ·
aicloud

Allbirds Ditches Shoes, Rebrands as GPU Cloud Provider 'NewBird AI'

Sustainable footwear company Allbirds is abandoning its core business to chase the AI infrastructure gold rush. The company secured $50 million in convertible f

via Ars Technica ·
cybersecurityvulnerability

April 2026 Patch Tuesday: 167 Microsoft Fixes, SharePoint Zero-Day, BlueHammer Exploit

Microsoft shipped its second-largest Patch Tuesday ever, addressing 167 vulnerabilities across Windows and related products. The headline flaw is CVE-2026-32201

via Krebs on Security ·
vulnerabilitycybersecurity

April 2026 Patch Tuesday Delivers Critical Fixes From SAP, Adobe, Microsoft, and Fortinet

The April 2026 Patch Tuesday cycle brought a heavy round of security updates from multiple major vendors. Microsoft addressed dozens of vulnerabilities across W

via The Hacker News ·
cybersecuritymalware

Attackers Turn n8n Webhooks Into Phishing Infrastructure Since October 2025

Threat actors have been weaponizing n8n, the popular low-code workflow automation platform, as a delivery layer for phishing campaigns since October 2025. By re

via The Hacker News ·