Security Saturday — the vulnerabilities, advisories, and incidents from the past week worth knowing about.
Security
- Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites (The Hacker News)
Attackers modified a JavaScript file served by advertising technology company Adform, turning it into a browser-side tool that rewrites cryptocurrency wallet addresses. Adform detected the incident on July 27, 2026, removed the malicious co - Adobe Campaign Classic CVSS 10.0 Flaw Could Run Code Without User Interaction (The Hacker News)
Adobe has released security updates to address a maximum-severity security flaw in Campaign Classic (ACC), its enterprise-focused marketing automation platform, that could result in arbitrary code execution. The vulnerability, tracked as CV - Friday Squid Blogging: Squid Helps Discover New Marine Species (Schneier on Security)
The Squid is a new scientific machine : One of the technological breakthroughs was the onboard use of a spinning wheel confocal microscope, nicknamed the Squid, which uses lasers to scan microscopic details of how organisms are put together - Anthropic’s Opus 5 Is Better at Resisting Prompt Injection (Schneier on Security)
The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 (5.9% a - Read This Before You Buy That TV Streaming Stick (KrebsOnSecurity)
Security experts have been sounding the alarm for years about the risks of using generic TV boxes that promise unlimited content streaming for a one-time fee, warning that they secretly rent the user's Internet connection out to strangers.
Enjoying these roundups?
Subscribe for daily follow-ups on AI news, trending open-source tools, and Security Saturdays.
Subscribe free →