News Archives

Meta’s Patent Describes an AI That Monitors Your Voice, Mood and Activity All Day

Meta filed a patent for an AI system that continuously listens to speech, infers emotional state from voice and other signals, timestamps and logs readings, and can couple that with a mood-aware workout coach. The application (US 2026/0182881) was filed Dec 2025, published Jul 2, 2026, and names Lachlan Dunn as inventor.

July 13, 2026

Ransomware Negotiator Sentenced to 70 Months in Prison for Cooperating with BlackCat Operators

A former ransomware negotiator, Angelo Martino, has been sentenced to 70 months in prison for aiding BlackCat operators, leaking victims’ negotiation details, and collaborating with two cybersecurity professionals in 2023 attacks. Authorities have seized $10 million in assets and a restitution hearing is set for September 17, 2026.

July 11, 2026

15-Year-Old GhostLock Kernel Bug Lets Local Users Gain Root and Escape Containers

GhostLock (CVE-2026-43499) is a 15-year-old Linux kernel vulnerability that permits any local, logged-in user to gain root and break out of containers. Researchers at Nebula Security built a reliable exploit and urge immediate kernel updates; patches are rolling out but initial fixes required follow-ups.

July 9, 2026

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Proofpoint warns of a China-linked cluster, UNK_MassTraction, exploiting patched Roundcube flaws (CVE-2024-42009, CVE-2025-49113) to target physics and engineering departments at US and Canadian universities, delivering IceCube, VShell, SquareShell and SNOWLIGHT for persistence and post-exploitation.

July 7, 2026

Attackers Begin Scanning Gitea Docker Vulnerability CVE-2026-20896 Just 13 Days After Disclosure

Security researchers warn that attackers began probing a critical Gitea Docker vulnerability (CVE-2026-20896, CVSS 9.8) just 13 days after it was disclosed. The flaw stems from a misconfigured app.ini template that trusts the X-WEBAUTH-USER header from any IP. Update to Gitea 1.26.3 immediately.

July 6, 2026

U.S. Public Entity Reportedly Paid $1M to Kairos in Data-Theft Extortion

A Ransom-ISAC case study reveals a U.S. public entity allegedly paid about $1 million to a group calling itself Kairos to prevent stolen files from being published. The investigation, built from a leaked negotiation chat and blockchain tracing, suggests no encryption was used and highlights a growing trend of pure data extortion.

July 4, 2026