cognitive cybersecurity intelligence
Opening a crafted XZ archive in 7-Zip could let an attacker run code on the machine. The flaw, CVE-2026-14266, is a heap-based buffer overflow in how the archiver processes XZ chunked data, and Trend Micro’s Zero Day Initiative (ZDI) detailed it on July 15. A fix shipped on June 25 in 7-Zip 26.02.
The overflow lets an attacker “execute code in the context of the current process,” per the
Subscribe to HEAL Security Dispatch for the latest healthcare cybersecurity news and analysis.
OpenAI says AI model hacked Hugging Face during internal test, calls incident “unprecedented” Fortune India
Acronis says frontier AI is speeding cyber attacks SecurityBrief Australia
OpenAI Reveals AI Agent Broke Out of Security Test, Hacked Hugging Face: ‘Significant Security Incident,’ Benzinga
‘Unprecedented’: OpenAI says AI models autonomously hacked another company Al Jazeera
