Cleo Harmony Flaw Lets Remote Attackers Escalate Privileges via JWT Refresh Token

02/09/2026

A newly disclosed vulnerability in Cleo Harmony, a widely deployed managed file transfer and integration platform, is putting enterprise networks at risk after security researchers confirmed that remote attackers can escalate privileges by tampering with the software's JWT refresh token mechanism. Tracked as CVE-2026-84115 and rated 8.3 (High) on the CVSS scale, the flaw affects all Cleo Harmony builds up to version 5.8.1.10, and a working public exploit is already circulating, raising the urgency for organizations to act quickly.

The vulnerability lives inside the JWT Refresh Token Handler component, specifically in an unidentified function tied to the /api/connections endpoint. At the heart of the issue is improper handling of the Bearer argument passed in HTTP authorization headers. By crafting a manipulated Bearer token, an attacker can trick the application into granting elevated permissions that were never intended for their session.

Cleo Harmony Vulnerability Security analysts classify this weakness under CWE-269,…

➪ Continue reading the full article on cybersecuritynews.com

4 reasons I’m finally quitting Claude Pro – and what I am replacing it with

Claude Pro was my default workspace — the model I trusted for heavy thinking, coding, and complex reasoning. But over time, as my workflow evolved, I couldn't help but notice Claude's limitations. ➪ Continue reading the full article on www.xda-developers.com … [Read More...]

OpenAI admits to German wiki ‘incident’

OpenAI says it needs to overhaul how and when it reports instances of AI models attacking real-world targets. The acknowledgement comes as the company manages the fallout from reports that a swarm of its out-of-control agents hijacked a German wiki site. Regarding the "'wiki incident,' where our agents wrote to several internet sites," OpenAI wrote in a post on X on Saturday morning, "it's past … [Read More...]

Your SSD is running a multi-core computer with its own RAM, and that's the only reason it's fast

We're used to modern NVMe SSD transfer speeds, which have touched 15,000 MB/s with PCIe 5.0 drives. They eclipse anything that came before — SATA SSDs and hard drives alike. Even if you don't have a high-end Gen5 SSD on your system, your Gen4 SSD is running pretty fast right now. ➪ Continue reading the full article on www.xda-developers.com … [Read More...]

Robotaxis enter their villain era

It's Bullitt meets Christine meets Waymo. A new short film imagines a San Francisco car chase where the other driver isn't human - and the car may be trying to kill you. That a robotaxi can now be cast as the villain with almost no explanation says something about the present moment. Autonomous cars have gone from sci-fi curiosities to fixtures in some American cities, where they've become … [Read More...]

How to Buy Refurbished Phones Safely in India?

Refurbished phones can be safe to buy in India when purchased from a manufacturer, known retailer, or reputable physical refurbisher. Before buying a refurbished phone, shoppers should check hardware features, warranty, and the seller's reliability. Here is a complete checklist that can help you choose and buy a refurbished phone in India. ➪ Continue reading the full article on www.gadgets360.com … [Read More...]

OpenAI Agents Hacked Another Website

Plus: Tens of millions of US and Canadian drivers' licenses go up for sale on the dark web, the US military finally tries to tackle the risk online ad data poses to troops, and more. ➪ Continue reading the full article on www.wired.com … [Read More...]

I compressed my Steam library instead of buying another SSD, and got 400GB back

With AAA titles taking up more than 100GB of storage space these days, even a 2TB SSD won't cut it unless you're okay with uninstalling and reinstalling games as you need them. For years, I never really had more than four or five games installed on my PC at any given time, so storage space wasn't something I was worried about. That changed after I installed three AAA games that took up about 150GB … [Read More...]

Microsoft Teams Desktop Client Fails to Load on Windows System – Microsoft Investigating

Microsoft is investigating an ongoing issue causing some Windows users to face significant delays or outright failures when launching the Microsoft Teams desktop client. The company acknowledged the problem, tracked internally as TM1466820, and confirmed it remains unresolved as engineers continue digging through service logs to find a root cause. According to Microsoft's incident notice, affected … [Read More...]

iPhone 18 Pro Roundup: Expected Price, Launch Date, Specifications, Features and More

The iPhone 18 Pro is expected to bring several internal upgrades while retaining much of the iPhone 17 Pro's design. Rumours point to a 2nm A20 Pro chip, a new C2 modem, LTPO+ display technology and a larger battery. Apple could also introduce a variable-aperture main camera and a smaller Dynamic Island. The phone may arrive in four colours, including a new Dark Cherry shade. Pricing could rise … [Read More...]

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18,000 posts on a dormant 25-year-old German wiki between May and July 2026, using the site as a shared board to pool answers to a timed web task and pass around a way out of their sandbox. The activity was concentrated on DSEwiki, a German software developer wiki that … [Read More...]