
CosmosEscape: The Exploit Chain That Exposed the Azure Cosmos DB Master Key
Wiz researchers exposed the Azure Cosmos DB Master Key via the CosmosEscape exploit chain. Microsoft patched the critical flaw risking Teams and Copilot data.

Wiz researchers exposed the Azure Cosmos DB Master Key via the CosmosEscape exploit chain. Microsoft patched the critical flaw risking Teams and Copilot data.

Google DeepMind's Gemini Robotics 2 controls full humanoid robots offline, but expanding AI autonomy increases the physical attack surface and cyber risks.

The FCC expanded its Covered List to ban new foreign mobile robots and connected power inverters due to national security risks and severe vulnerabilities.

Analog Devices confirms a June data breach and is verifying a separate claim by ExfilSquad of stealing 570,000 records. Get the latest security details.

Amazon attributes npm supply chain attacks on debug, chalk, and axios to North Korean group Sapphire Sleet, linking three campaigns over twelve months.

Anthropic's Mythos AI finds SharePoint vulnerabilities faster than Microsoft can patch them, prompting a Five Eyes intelligence alert.

CVE-2026-16232 allows remote attackers to bypass auth in Check Point SmartConsole and get admin roles. Apply Jumbo Hotfixes now.

Laundry Bear APT exploits an Exchange OWA zero-day (CVE-2026-42897) deploying the OWAReaper backdoor for invisible espionage and persistent mailbox access.

Cisco released urgent hotfixes for two FMC vulnerabilities, including an actively exploited zero-day. Discover the risks, IoCs, and how to apply fixes.