SECURITY 638
- Northflank Security Breach Leads to Abuse of Customers' AI API Keys
- Official Claude Code Extension Compromise Security Advisory
- CVE-2026-119285 - Fiber CORS Vulnerability
- Volt Typhoon Hides Zero-Day Attacks Using 'Silent Train' Framework
- Yamaha YMS-VPN8 and YMS-VPN8-CP Register Windows Services with Unquoted File Paths
- CVE-2026-82411 - Objects API Cross-object-type Authorization Bypass
- Process Trees in Livehunt YARA Rules That Know Who Launched What
- GoAhead TLS Flaws Allow Revoked Client Certificates and Enable Session Decryption
- John Althouse Announces 3 Critical Vulnerabilities for IoT and Military Devices
- The Pwn Request Reckoning What Still Works Against GitHub Actions
- Researcher Hacks Into "Steal My Bitcoin" Server in PHP Security Test
- CVE-2026-2270 - StatefulSet and ControllerRevision Vulnerability
- Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach Root on Other Servers
- Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python and Other Widely Used Software
- Pleasanter LDAP Authentication Bypass Vulnerability
- Critical Vulnerabilities in PHP CVE-2026-109618 and CVE-2026-109619
- Abandoned Popcorn Time App Exposed Millions of Devices to RCE Attacks
- CVE-2026-76268 | Splunk Enterprise Patroni REST API Missing Authentication Vulnerability
- This Is Not a Drill' Critical PHP Vulnerabilities Are Setting the Internet on Fire
- Signal Bug Could Let Someone Keep Listening After You Hang Up
- Compromised eMudhra Intermediate Certificates
- Mobile Communications A Blind Spot Security Leaders Can't Ignore
- PSA Patch Your Plex Media Server Before Someone Hacks It
- Pwnescape A Critical Linux Kernel Vulnerability
- Stop Evaluating What to Patch by CVSS Score Alone
- CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP
- CVE-2026-102298 - Insufficient Authorization and User Boundary Validation in Omada Controller MSP
- Swann Communications SWIFI-SE2KIC Vulnerabilities
- A Series of Unauthenticated Events Chained Exploitation of Ivanti Connect Secure Zero-Days
- Ledger Confirms Spy Chip Implant Behind Wallet Crypto Thefts
- It's Another Week of the Vulnpocalypse. Bring a Coat
- Nippon Columbia Malware Incident Exposes 8.6 Million Karaoke Fan Records
- CVE-2026-108978 - Samsung rlottie Heap-based Buffer Overflow
- CVE-2026-108769 - zhayujie CowAgent Markdown Rendering Denial of Service
- Critical Telegram Desktop Bug Hackers Can Steal Accounts with a Single Click
- FBI Warns of Ongoing FortiBleed Attacks Locking Out VPN Admins
- Poetry is the new AI security threat as PoeLLM malware infects 3K+ servers
- CVE-2026-107284 - AsyncHttpClient Vulnerability Discovered
- CVE-2026-105816 - Vault Vulnerable to Arbitrary Code Execution
- Hackers Obtain Counterfeit TLS Certificates for Google and Other Large Services
- Domino's Customers Targeted in Credential Stuffing Attacks
- ASOS Confirms Data Breach After "HACKED" In-App Notifications
- Rejetto HFS Servers Actively Scanned for Critical RCE Flaw
- Pwn2Own Ireland 2026 - The Full Schedule
- Improper Limitation of a Pathname to a Restricted Directory
- Vulnerabilities in Monta monta.app Exposed
- Teltonika RutOS Command Injection Vulnerability
- Pentagon Data Breach Impacts Millions of US Military Personnel
- MikroTik RouterOS Flaw Lets Attackers Run Code as Root
- Meari IoT Cloud Platform OpenAPI Service Vulnerabilities
- CVE-2026-86344 - 389-ds-base Vulnerability Report
- Armatura LLC Armatura One Vulnerabilities
- Multiple Vulnerabilities in Pgpool-II
- Multiple Vulnerabilities in Image Scanner Driver for Linux
- CVE-2026-94204 - Incorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application
- CVE-2026-93853 - Barman Snapshot Backup Deletion Vulnerability
- Times Car Confirms Data Breach Affecting 6.6 Million User Accounts
- Over 16,000 Supabase Databases Expose PII, Passwords, Auth Tokens
- Zero-Click Vulnerabilities in Salesforce Agentforce Expose Wider AI Agent Risk
- Multiple Vulnerabilities in baserCMS
- Botslab G980H Dashcams Vulnerabilities
- One URL, Three Different Tricks
- CVE-2026-97368 - chillzhuang SpringBlade Vulnerability
- CVE-2026-85491 - CatalystSeal Vulnerability Details
- New RemControl Android Banking Malware Targets Users in Europe and Canada
- CVE-2024-0244 - A Heap Buffer Overflow in the Canon MF753Cdw Printer
- Sweden Fines Miljödata $183,000 Over Breach Affecting 2.2 Million
- Siemens WTV676 and WTV776 Vulnerability Advisory
- Some Cheap Smart Glasses Are a Security Disaster
- CVE-2026-61852 - Chartbrew SQL Injection Vulnerability
- BigCommerce Alerts Merchants of Data Breach Linked to Ribon Apps
- CVE-2026-94090 - JusticeRage Manalyze PE Parser Vulnerability
- Brevo Supply-Chain Attack Injected ClickFix Scripts on Customer Sites
- Mitsubishi Electric GX Works3 and Motion Control Settings Vulnerability
- Multiple Vulnerabilities in Lite-On O-RU Firmware
- Most Fraudulent Hires Receive Credentials Before Detection
- Low-quality Casino Sites Conceal Highly Dangerous Threat Actors
- Twitch Extension Exposes Users' OAuth Tokens
- Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
- CVE-2026-90824 - GPAC MP4Box Stack-Based Overflow Vulnerability
- Surfshark VPN Breach Hackers Access Internal Testing Servers
- New Android Malware Encrypts Files, Steals Data, and Harasses Victims
- Multiple Vulnerabilities in SolarView Compact
- CVE-2026-88002 - Open WebUI Vulnerability Exposes Server to Hang
- CVE-2026-15460 - Missing Channel-State Validation in Zephyr Bluetooth Classic L2CAP Receive Path
- ShinyHunters Hackers Claim Breach of Florida "DAVID" DMV Database
- Hackers Breach F5 BIG-IP APM Devices to Deploy Linux Rootkit
- DoppelCart Fraud Network Exposed 119,000 Fake Shops Stealing Credit Cards
- Mathspace Discloses Data Breach Affecting Over 1 Million People
- LG TV Flaws Could Let Attackers Listen In, Even In Standby Mode
- Critical Vulnerabilities in MikroTik RouterOS Being Actively Exploited
- CVE-2026-86148 - Tenda CP3 Kylin System Command Injection
- Plex Issues Urgent Patch Warning for 300,000 Media Servers
- X Money Rollout Linked to Password-Reset Attacks
- Multiple Vulnerabilities in XING CPTrans-ME-X
- Signature Optional - Analysis of CVE-2026-28323
- FBI Probes Service Selling 153M+ Drivers Licenses
- CVE-2026-84482 - WWBN AVideo Cross-Site Request Forgery
- Traefik Vulnerability Discovered in Version Through 3.7.11
- Security Incident – BGP Hijacking
- Multiple Vulnerabilities in SOY Series
- CVE-2026-82343 - Gimp Vulnerability Details
- CVE-2026-82306 - StarRocks Query Detail Endpoint Vulnerability
- CVE-2026-82291 - HeyForm Reflects Any Origin in CORS Responses While Allowing Credentials
- Installer for Rakuten Kobo Desktop Application Vulnerability
- AI Girlfriend Review Site's Secrets Exposed for Three Weeks
- New GPUThor Attack Defeats NVIDIA ECC Protection for Root Access
- CHIRP Kenwood ITM Driver Eval Injection Allows Arbitrary Code Execution via Crafted Radio File
- Beware of Fake Indeed Interview Apps Used to Install Spyware
- Half-click Unauthenticated Remote Code Execution on Horde Groupware IMP
- A GUID is Not a Credential Unauthenticated RCE in Veeam Service Provider Console
- LACMA Data Breach Exposed Sensitive Information
- FURUNO FA-50 Class B AIS Transponder Vulnerabilities
- ToxicPanda Android Malware Uses VPN Permissions to Block Google Play
- Zero-Click Grok Chat History Theft Adversa AI Demonstrates Cryptographic Context Injection
- Even MOAR Powershell Analyzing Entra Logins
- Simple Scans for Cloud Metadata Service
- Be Careful What You Put in 'Anyone with the Link' Google Docs
- Your Controls Block Known Attacks. What About the Behavior?
- CVE-2026-52854 - mediawiki/maps Stored XSS Vulnerability
- UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
- CVE-2026-75531 - Stored Cross-Site Scripting Vulnerability in Pandora
- CVE-2026-69148 - MLflow Vulnerability Exposes User Artifacts
- Large-scale DDoS Attacks Disrupted Threema Secure Messaging Service
- GeoServer Zero-Day Is Already Being Probed. That's the Problem
- Vulnerabilities in Mira Hormone Monitor and Android App
- Delta Probes Wi-Fi Deauth Attack on Flight Carrying DEF CON Attendees
- Apache Gravitino 1.2.1 - SSRF
- Enriched URL Reports VirusTotal URL Scanning 2.0
- CVE-2026-73249 - calibre Content Server Vulnerability
- CVE-2026-11812 - UpdateHub Vulnerability Causes DoS
- CVE-2026-12372 - Server-Side Request Forgery (SSRF) in nltk/nltk
- Hackers Breach TrueConf to Trojanize Client Installers with Backdoors
- Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
- Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
- Apple WebKit Vulnerabilities Expose Your IP Address Despite Private Relay
- CVE-2026-7406 - BMP File Parsing Untrusted Pointer Dereference in Autodesk Products
- Don't Revoke That Token Yet Inside the keyv/cacheable npm Worm
- New XCSSET Variant Targets macOS Developers via Compromised Xcode Projects
- Massive ChainDrop npm Supply-Chain Attack Infects Hundreds of Packages
- Multiple Vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App
- CVE-2026-11836 - Production Debug-Unlock Token Verification Missing Device Binding
- CVE-2026-10848 - Out-of-bounds Read in Zephyr OCPP 1.6 RPC Message Parser
- Watchfire Controller Software Vulnerability Alert
- CVE-2026-68563 - Information Disclosure in Ansible Collection Redhat Leapp
- Securing Agents Across Perplexity's Client Endpoints with Numbat
- CVE-2026-14643 undici Vulnerable to Cross-User Information Disclosure
- Multiple Vulnerabilities in ELECOM Wireless LAN Routers and Access Points
- igloohome Smart Lock Mobile Application Vulnerability Alert
- CubePilot Drone Software Developer Hit by DNS Hijacking
- Java Spring Boot Heapdump Scans Expose Sensitive Data
- Ernst & Young Data Breach Claimed by ShinyHunters Extortion Gang
- Weak Logins Detected in ESAFENET CDG 3 Document Management System
- CVE-2026-17497 - NoteGen Arbitrary OS Command Execution via Tauri Shell
- CVE-2026-10681 - SMP Race in Thread Index Allocation
- Pope's Official Prayer App Leaks 700K+ Users' Info
- Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
- WhatsApp Web Chats Exposed by Adobe's Acrobat Extension Flaw
- New Dolphin X Malware Uses AI to Rank High-Value Targets
- Data Breach Exposes Client Information at Origin Energy
- Millions of Cars Could Be Tracked and Unlocked by a Hidden Security Flaw
- Oracle Hospitality Simphony Multiple Vulnerabilities Discovered
- Vulnerabilities in Tycon Systems TPDIN-Monitor-WEB2
- CVE-2026-47134 - ClearanceKit Vulnerability Exposed
- Scans for Hikvision Intelligent Security API
- CVE-2026-64186 - Fixing Latent Out-of-Bounds Access in IOMMU Debugfs
- GitHub-native Command-and-Control Framework OctoC2 Released
- CVE-2026-16195 - Sipeed PicoClaw Group Message Authorization Flaw
- CVE-2026-10130 - QueryWeaver Authentication Bypass Vulnerability
- Shark Vacuum Flaw Exposes Cameras, Home Maps and Wi-Fi Passwords
- HollowByte DDoS Flaw Bloats OpenSSL Server Memory
- HollowByte DDoS Flaw Bloats OpenSSL Server Memory with 11-Byte Payload
- SALTO ProAccess Space Vulnerability Alert
- CVE-2026-44436 - Quicly Vulnerability Exposed
- CVE-2026-63175 - Cross-Capture Session Data Leakage in Looklyloo
- CVE-2026-62314 - Anubis Policy Bypass via Client Controlled X-Original-URI Header
- Someone Is Scanning for Your MCP Servers and AI Assistant Credentials
- CVE-2026-58408 - ChurchCRM Vulnerability Exposes PII
- CVE-2026-15506 - SecureAge CatchPulse Driver Vulnerability
- Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices
- CVE-2026-10660 - Memory Corruption in Bluetooth BAP Broadcast Assistant
- Progress Urges ShareFile Admins to Shut Down Servers Over Credible Threat
- Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched
- Researcher Finds 9 Vulnerabilities in ATM Security Software
- CVE-2026-55428 - Coder Vulnerability Route Hijacking Risk
- Spanish Police Arrest Man Linked to CARR, Z-Pentest, and NoName057(16)
- Opera GX Flaw Lets Sites Auto-Install Mods to Steal Data
- MEmu Android Emulator 9.2.7.0 - Local Privilege Escalation
- Confidential Computing's Core Trust Mechanism is Broken
- Unpatched Flaws Disclosed in Filesystem Bundled Into Millions of Embedded Devices
- CVE-2026-13768 - Gardyn IoT Hub Use of Hard-coded Credentials
- New ChocoPoC Malware Targets Researchers via Trojanized PoC Exploits
- Kubota Hackers Had Month-Long Access to Network Systems
- Chrome Needs Another Whopper Update to Fix 382 Security Bugs
- Vulnerabilities in OFFIS DCMTK Toolkit
- StoneFly Storage Concentrator Vulnerabilities Exposed
- RPG Maker MV and MZ Vulnerable to OS Command Injection
- CVE-2026-10648 - Critical NULL-pointer Dereference Vulnerability in MCUmgr
- Adding Automation to the Favicon.ico Method of Host Recon
- Malicious Edge Extension Abuses Native Messaging as Bridge to Malware
- JaredFromSubway MEV Bot Hacked in $15 Million Crypto Theft
- FFmpeg Fixes PixelSmash Flaw in Widely Used Video Decoder
- 29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
- Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
- Texas Government Data Breach Exposes Over 3 Million Driver's Licenses
- Peter Thiel's Secret Society Leak Creates a Perfect Target List for Espionage, Influence Operations, and Blackmail
- FortiBleed Leak Exposes Fortinet VPN Credentials for 73,000 Devices
- The Red Agent POV How it Reasoned its Way to SSRF
- CVE-2026-48764 - TypeBot SSRF Vulnerability Exploited via DNS Rebinding
- How Orca Traced an nginx Flaw to 1.45 Million Tengine Servers
- CVE-2026-44587 - CarrierWave Bypass Vulnerability
- CVE-2026-12191 - Vulnerability in Comma AI Openpilot
- Weekly Metasploit Update New Kerberos/Certificate Tracing Options and Multiple New Modules
- Beware of Fake Verification Pages Stealing Steam Accounts
- Alert Exploitation of CVE-2026-34197 in Apache ActiveMQ
- 21,786 Home Cameras Exposed No Password, No Warning
- Yarbo Android/iOS Mobile Application and Cloud Infrastructure Vulnerabilities
- 7 Open Source Incident Response Tools by Category
- Oracle PeopleSoft Servers Hacked in ShinyHunters Data Theft Attacks
- Justice Department and FBI Disable 13 Websites Linked to Chinese Agents
- ServiceNow Discloses Security Incident Exposing Customer Data
- CVE-2026-9746 - Server Crashes Due to Exchange Option
- CVE-2026-11459 - SecureAge CatchPulse IOCTL Vulnerability Disclosed
- CVE-2026-44825 | Apache Solr AuthTool Hardcoded Credentials Vulnerability
- Spain Arrests Doxer Leaking Sensitive Data of Government Employees
- Critical WP Maps Pro Plugin Flaw Leads to 3,600 Attacks in One Day
- CVE-2026-10199 - Assimp glTF2Asset.h LazyDict Null Pointer Dereference
- ChatGPhish The Page Is the Payload
- CVE-2026-48810 - FreeScout Thread Edit Authorization Bypass via Missing Mailbox Check
- CVE-2026-35616 FortiClient EMS Flaw Actively Exploited in Malware Attacks
- Scramble Remote Code Execution Vulnerability Discovered
- Introducing EvidenceForge - Synthetic Security Logs That Don't Look Fake
- EspoCRM 9.3.3 - SSRF Vulnerability Discovered
- Sparkplug B Protocol Fuzzing with AI Assistance
- ABB LVS MConfig Vulnerability Advisory
- Eppendorf BioFlo 320 Vulnerability Alert
- npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
- Detecting CVE-2026-0265 at Scale PAN-OS CAS Authentication Bypass
- Hitachi Energy GMS600 Vulnerability Advisory
- Attackers Expose Plaintext Passwords of 46k Myspace93 Users After 2021 Breach
- Drupal Admins Rush to Patch Critical SQL Injection Vulnerability
- Drupal to Release Urgent Core Security Updates on May 20, Sites Told to Prepare
- Microsoft Rejects Critical Azure Vulnerability Report, No CVE Issued
- Security Update Guide - Loading
- First Public Kernel Memory Corruption
- Zero-day Exploit Bypasses Windows 11 BitLocker Protection
- PraisonAI Vulnerability Gets Scanned Within 4 Hours of Disclosure
- Quest KACE SMA Flaw CVE-2025-32975 Exposes 60 Organizations
- Glances 4.5.2 Command Injection Vulnerability
- Coreruleset 4.21.0 - Firewall Bypass
- Bug Hunter Tracks Down Three Massive MCP Flaws
- AWS to Quick Admins Access Control Issues and Customer Impact
- New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
- Critical Vulnerability in ABB AC500 V3 PLCs
- ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities
- New GhostLock Tool Abuses Windows API to Block File Access
- NVIDIA Confirms GeForce NOW Data Breach Affecting Armenian Users
- LuaJIT 2.1.1774638290 - Arbitrary Code Execution
- Bludit CMS 3.18.4 - RCE Vulnerability Discovered
- Google Fixes CVSS 10 Gemini CLI Vulnerability Enabling GitHub Issue-Based RCE
- The New Ouroboros Technique and How It Fits in dMSA's Security Model
- Progress Patches Critical MOVEit Automation Bug Enabling Authentication Bypass
- Microsoft Defender Flags DigiCert Certs as Trojan
- Trellix Discloses Security Breach of Code Repository
- The Internet Is Falling Down, Falling Down, Falling Down (cPanel & WHM Authentication Bypass CVE-2026)
- Copy Fail Vulnerability in Major Linux Distributions
- Agent's Claims on WhatsApp Access Spark Security Concerns
- Microsoft Won't Patch PhantomRPC - Feature or Bug?
- Hackers Exploit RCE Flaws in Qinglong Task Scheduler for Cryptomining
- GitHub Rushed to Fix a Critical Vulnerability in Less Than Six Hours
- Robinhood Account Creation Flaw Abused to Send Phishing Emails
- Firefox Bug CVE-2026-6770 Enables Cross-Site Tracking and Tor Fingerprinting
- Canada Arrests Three for Operating SMS Blaster Device in Toronto
- Critical Bug in CrowdStrike LogScale Lets Attackers Access Files
- American Utility Firm Itron Discloses Breach of Internal IT Network
- Apache ActiveMQ Series Improper Validation of MQTT Packets
- Intrado 911 Emergency Gateway Vulnerability Disclosed
- Stopping Fraud at Each Stage of the Customer Journey Without Adding Friction
- Seiko USA Website Defaced Hacker Claims Customer Data Theft
- Vercel April 2026 Security Incident
- ZionSiphon Malware Threatens Water Treatment Systems
- Securing Remote Server Access Why VPNs Matter for Administrators
- PHP Composer Flaws Enable Remote Command Execution via Perforce VCS
- wolfSSL Vulnerability Hits IoT, Routers and Military Systems, Update to 5.9.1 Now
- wolfSSL Vulnerability Hits IoT, Routers and Military Systems, Update to 5.9.1 Now
- Why Your Deprecated Endpoints Are an Attacker's Best Friend The Rise of Ghost APIs
- The Mythos Inflection Point - Dealing With the Upcoming Vulnerability Disclosure Avalanche
- React Server 19.2.0 - Remote Code Execution
- Google Chrome Adds Infostealer Protection Against Session Cookie Theft
- FortiWeb 8.0.2 - Remote Code Execution Exploit Disclosed
- CVE-2026-23226 How a Missing Lock in ksmbd's Channel List Exposes Your Linux SMB3 Server
- Docker CVE-2026-34040 Lets Attackers Bypass Authorization and Gain Host Access
- GPUBreach Exploit Uses GPU Memory Bit-Flips to Achieve Full System Takeover
- 10 Minutes with Claude Remote Code Execution in Apache ActiveMQ (CVE-2026-34197)
- MCP Isn't a Protocol Problem An Identity Crisis
- is-localhost-ip 2.0.0 - SSRF Vulnerability Discovered
- Desktop Window Manager Core Library 10.0.10240.0 - Privilege Escalation
- Traffic Violation Scams Switch to QR Codes in New Phishing Texts
- CBP Facility Codes Leaked via Online Flashcards
- New Rowhammer Attacks Give Complete Control of Machines Running Nvidia GPUs
- GIGABYTE Control Center Vulnerable to Arbitrary File Write Flaw
- Anritsu Remote Spectrum Monitor Vulnerability Advisory
- New RoadK1ll WebSocket Implant Used to Pivot on Breached Networks
- LangChain Path Traversal Bug Exposes AI Pipeline Vulnerabilities
- 15-Year-Old strongSwan Flaw Lets Attackers Crash VPNs via Integer Underflow
- New RoadK1ll WebSocket Implant Used to Pivot on Breached Networks
- LangChain Path Traversal Bug Exposes AI Pipeline Vulnerabilities
- 15-Year-Old strongSwan Flaw Lets Attackers Crash VPNs via Integer Underflow
- File Read Flaw in Smart Slider Plugin Impacts 500K WordPress Sites
- File Read Flaw in Smart Slider Plugin Impacts 500K WordPress Sites
- UK Sanctions Xinbi Marketplace Linked to Asian Scam Centers
- Researchers Uncover WebRTC Skimmer Bypassing Traditional Defenses
- UK Sanctions Xinbi Marketplace Linked to Asian Scam Centers
- Researchers Uncover WebRTC Skimmer Bypassing Traditional Defenses
- PolyShell Attacks Target 56% of All Vulnerable Magento Stores
- PolyShell Attacks Target 56% of All Vulnerable Magento Stores
- QNAP Fixes Four Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
- Critical Vulnerability CVE-2025-32975 Exploited in Quest KACE Systems
- QNAP Fixes Four Vulnerabilities Demonstrated at Pwn2Own Ireland 2025
- Critical Vulnerability CVE-2025-32975 Exploited in Quest KACE Systems
- CVE-2026-31979 The Symlink Trap - Root Privilege Escalation in Himmelblau
- CVE-2026-31979 The Symlink Trap - Root Privilege Escalation in Himmelblau
- Critical Ubiquiti UniFi Security Flaw Allows Potential Account Hijacking
- New 'PolyShell' Flaw Allows Unauthenticated RCE on Magento E-Stores
- Critical Ubiquiti UniFi Security Flaw Allows Potential Account Hijacking
- New 'PolyShell' Flaw Allows Unauthenticated RCE on Magento E-Stores
- Scans for Adminer Understanding the Threat
- New Ubuntu Flaw Enables Local Attackers to Gain Root Access
- Schneider Electric SCADAPack and RemoteConnect Vulnerability Advisory
- Flaw in UK's Corporate Registry Exposes Directors' Data
- Betterleaks A New Open-Source Secrets Scanner to Replace Gitleaks
- AppsFlyer Web SDK Hijacked to Spread Crypto-Stealing JavaScript Code
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root
- Canadian Retail Giant Loblaw Notifies Customers of Data Breach
- This Android Vulnerability Can Break Your Lock Screen in Under 60 Seconds
- Hewlett Packard Enterprise Fixes Critical Authentication Bypass in Aruba AOS-CX
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Hewlett Packard Enterprise Fixes Critical Authentication Bypass in Aruba AOS-CX
- Alert Regarding Vulnerabilities in Adobe Acrobat and Reader
- Vulnerabilities in Lantronix EDS3000PS and EDS5000
- Honeywell IQ4x BMS Controller Vulnerability Advisory
- Ericsson US Discloses Data Breach After Service Provider Hack
- Improper File Access Permission Settings in Digital Arts Products
- Fixing Request Smuggling Vulnerabilities in Pingora OSS Deployments
- High-severity Qualcomm Bug Hits Android Devices in Targeted Attacks
- Malicious RedAlert - Rocket Alerts Application Targets Israeli Phone Calls, SMS, and User Information
- QuickLens Chrome Extension Steals Crypto and Shows ClickFix Attack
- Critical Juniper Networks PTX Flaw Allows Full Router Takeover
- One-click Disaster Microsoft’s Entra Tokens at Risk
- Critical Cisco SD-WAN Bug Exploited in Zero-Day Attacks 🚨
- RoguePilot Flaw in GitHub Codespaces Enabled Copilot to Leak GITHUB_TOKEN
- Critical Vulnerabilities Found in NesterSoft WorkTime
- Predator Spyware Hides iOS Recording Indicators
- PayPal App Code Error Exposes Personal Information
- Welker OdorEyes EcoSystem Pulse Bypass System Vulnerability Alert
- Telegram Channels Expose Rapid Weaponization of SmarterMail Flaws
- Job Scam Alert Fake Google Forms Site Harvesting Logins
- Critical Grandstream VoIP Bug Highlights SMB Security Blind Spot
- Critical Vulnerabilities in GE Vernova Enervista UR Setup
- Washington Hotel in Japan Discloses Ransomware Infection Incident
- Security Flaw at DavaIndia Pharmacy Exposes Customer Data
- Full Disclosure Authenticated RCE Vulnerabilities in Netgate pfSense
- Eurail Confirms Stolen Traveler Data for Sale on Dark Web
- Snail Mail Phishing Targets Trezor and Ledger Users
- Security Experts Warn Discord Age Checks Create 'Identity Honey Pot'
- Were Telcos Warned About the Ancient Telnet Bug?
- Microsoft Store Outlook Add-in Hijacked to Steal 4,000 Accounts
- Crazy Ransomware Gang Abuses Employee Monitoring Tool in Attacks
- New Linux Botnet SSHStalker Uses Old-School IRC for C2 Comms
- Quick Howto - Extract URLs from RTF Files
- Password Guessing Without AI How Attackers Build Targeted Wordlists
- How the GNU C Compiler Became the Clippy of Cryptography
- BeyondTrust Fixes Critical Pre-Auth Bug Allowing Remote Code Execution
- DOGE May Have Misused Social Security Data, DOJ Admits
- Nearly 5 Million Web Servers Found Exposing Git Metadata – Study Reveals Widespread Risk of Code and Credential Leaks
- Spain's Ministry of Science Shuts Down Systems After Breach Claims
- Deadvax Threat Research Security Advisory
- The Double-Edged Sword of Non-Human Identities
- Wave of Citrix NetScaler Scans Utilize Thousands of Residential Proxies
- Step Finance Reports $40M Crypto Theft Due to Compromised Devices
- Multiple Vulnerabilities Found in ELECOM Wireless LAN Products
- Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users
- Notepad++ Hijacked by State-Sponsored Hackers
- Multiple Vulnerabilities Found in Cybozu Garoon
- Android RAT Uses Hugging Face to Host Malware
- Phishing kits adapt to the script of callers
- I'm locked in!
- Disrupting Largest Residential Proxy Network
- Clawdbot’s rename to Moltbot sparks impersonation campaign
- Old Windows quirks help punch through new admin defenses
- CVE-2025-40551 - Another Solarwinds Web Help Desk Deserialization Issue
- Critical sandbox escape flaw found in popular vm2 NodeJS library
- Chrome Extensions - Are you getting more than you bargained for?
- 1Password Adds Pop-Up Warnings for Suspected Phishing Sites
- Was Nike hacked? Attackers threaten to leak apparel giants’ data
- Investigation underway after 72M Under Armour records surface online
- Fortinet warns of active FortiCloud SSO bypass affecting updated devices
- Osiris - New Ransomware, Experienced Attackers?
- KONNI Adopts AI to Generate PowerShell Backdoors
- Online retailer PcComponentes says data breach claims are fake
- Don't click on the LastPass 'create backup' link - it's a scam
- Damn Vulnerable' Training Apps Leave Vendors' Clouds Exposed
- Critical TP-Link VIGI camera flaw allowed remote takeover of surveillance systems
- Ingram Micro admits summer ransomware raid exposed thousands of staff records
- Mandiant releases quick credential cracker, to hasten the death of a bad protocol
- RPi-Jukebox-RFID 2.8.0 - Remote Command Execution
- Fast Pair, loose security - Bluetooth accessories open to silent hijack
- Inside RedVDS - How a single virtual desktop provider fueled worldwide cybercriminal operations
- A single click mounted a covert, multistage attack against Copilot
- Electrum Kamacite Ten Years Adversary Tradecraft Intel Report 01 26
- Hacker gets seven years for breaching Rotterdam and Antwerp ports
- Instagram denies breach amid claims of 17 million account data leak
- Phishing Campaign Uses Maduro Arrest Story to Deliver Backdoor Malware
- Public PoC prompts Cisco patch for ISE, ISE-PIC vulnerability
- High-Severity Flaw in Open WebUI Affects AI Connections
- Risks of OOB Access via IP KVM Devices
- NordVPN Denies Breach After Hacker Claims Access to Salesforce Dev Data
- Prince of Persia ran a covert Iranian spy campaign for over a decade
- Hackers attack WatchGuard Firebox firewalls 120K IPs exposed and vulnerable
- RansomHouse upgrades encryption with multi-layered data processing
- Zeroday Cloud hacking event awards $320,0000 for 11 zero days
- WhatsApp device linking abused in account hijacking attacks
- 8M VPN users just got their AI chats wiped and sold
- Pornhub targeted in extortion attempt following Mixpanel breach exposing user activity
- 700,000 Records Compromised in Askul Ransomware Attack
- Atlassian Patches Critical Apache Tika Flaw
- Chrome Targeted by Active In-the-Wild Exploit Tied to Undisclosed High-Severity Flaw
- US military contractor breach expose employee data
- Attackers launch dual campaign on GlobalProtect portals and SonicWall APIs
- Despite Microsoft’s secret patch, LNK loophole remains viable for hackers to deliver malware
- King Addons flaw lets anyone become WordPress admin
- Not Location, Not Tunnel, but a Secret Third Thing - Datacenter Infrastructure & Identity Attacks
- Google fixes two Android zero days exploited in attacks, 107 flaws
- CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV
- Security researchers caution app developers about risks in using Google Antigravity
- FBI - Cybercriminals stole $262M by impersonating bank support teams
- FAQ About Sha1-Hulud 2.0 The "Second Coming" of the npm Supply-Chain Campaign
- Security Affairs newsletter Round 551 by Pierluigi Paganini – INTERNATIONAL EDITION
- Critical 7 Zip Vulnerability With Public Exploit Requires Manual Update
- WhatsApp API flaw let researchers scrape 3.5 billion accounts
- ShinyHunters 'does not like Salesforce at all,' claims the crew accessed Gainsight 3 months ago
- Sturnus - New Android banking trojan targets WhatsApp, Telegram, and Signal
- WrtHug Exploits Six ASUS WRT Flaws to Hijack Tens of Thousands of EoL Routers Worldwide
- Hackers Actively Exploiting 7-Zip Symbolic Link–Based RCE Vulnerability (CVE-2025-11001)
- Meta Expands WhatsApp Security Research with New Proxy Tool and $4M in Bounties This Year
- U.S. CISA adds Fortinet FortiWeb flaw to its Known Exploited Vulnerabilities catalog
- Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests' Payment Data
- No Place Like Localhost Unauthenticated Remote Access via Triofox Vulnerability CVE-2025-12480
- Dangerous runC flaws could allow hackers to escape Docker containers
- Large-Scale ClickFix Phishing Attacks Target Hotel Systems with PureRAT Malware
- Gootloader malware back for the attack, serves up ransomware
- GlassWorm Returns New Wave Strikes as We Expose Attacker Infrastructure
- How an Attacker Drained 28M from Balancer Through Rounding Error Exploitation
- Google warns of new AI-powered malware families deployed in the wild
- Exploited ‘Post SMTP’ Plugin Flaw Exposes WordPress Sites to Takeover
- Critical flaws in Fuji Electric, Delta Electronics, Survision, Radiometrics, IDIS systems raise security concerns for industrial sector
- Russian spies pack custom malware into hidden VMs on Windows machines
- Hackers use RMM tools to breach freighters and steal cargo shipments
- Claude AI APIs Can Be Abused for Data Exfiltration
- Penn hacker claims to have stolen 1.2 million donor records in data breach
- Proton Uncovers Hidden Data Leaks From the Dark Web
- New "Brash" Exploit Crashes Chromium Browsers Instantly with a Single Malicious URL
- Massive risk 92% of Exchange servers in Germany unprotected after Microsoft support ends
- Hackers exploiting Windows updates Microsoft urges users to patch
- Europol Warns of Rising Threat From Caller ID Spoofing Attacks
- Hackers exploiting critical vulnerability in Windows Server Update Service
- TARmageddon Flaw in Popular Rust Library Leads to RCE
- TP-Link warns of critical command injection flaw in Omada gateways
- Hackers exploit 34 zero-days on first day of Pwn2Own Ireland
- Self-spreading GlassWorm malware hits OpenVSX, VS Code registries
- Russian Lynk group leaks sensitive UK MoD files, including info on eight military bases
- PoC Exploit Released for Windows Server Update Services Remote Code Execution Vulnerability
- Whisper 2FA Behind One Million Phishing Attempts Since July
- F5 releases BIG-IP patches for stolen security vulnerabilities
- RMPocalypse Single 8-Byte Write Shatters AMD's SEV-SNP Confidential Computing
- New Android Pixnapping attack steals MFA codes pixel-by-pixel
- Attackers exploit valid logins in SonicWall SSL VPN compromise
- Threat actors steal firewall configs, impacting all SonicWall Cloud Backup users
- Hackers now use Velociraptor DFIR tool in ransomware attacks
- Hackers leveraging Teams to drop malware, steal data, Microsoft warns
- Foreign threat actors adopting ChatGPT, AI to bolster "old playbook" of attacks, OpenAI finds
- The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn
- Critical Vulnerability Puts 60,000 Redis Servers at Risk of Exploitation
- Microsoft Critical GoAnywhere bug exploited in ransomware attacks
- Ghost in the Cloud Weaponizing AWS X-Ray for Command & Control
- Red Hat confirms security incident after hackers claim GitHub breach
- Massive network of 30,000 websites filters victims before delivering scams or malware
- VMware virtual machines under attack hackers may have exploited zero-day for months
- New MatrixPDF toolkit turns PDFs into phishing and malware lures
- $50 Battering RAM Attack Breaks Intel and AMD Cloud Security Protections
- CISA issues Emergency Directive requiring federal agencies to mitigate critical Cisco ASA zero-day vulnerabilities
- Dutch teens arrested for trying to spy on Europol for Russia
- NCSC warns of persistent malware campaign [RayInitiator and LINE VIPER] targeting Cisco devices
- Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM Credentials
- Cisco warns of IOS zero-day vulnerability exploited in attacks
- US Secret Service dismantled covert communications network near the U.N. in New York
- SolarWinds Releases Hotfix for Critical CVE-2025-26399 Remote Code Execution Flaw
- PyPI urges users to reset credentials after new phishing attacks
- Microsoft Fixed Entra ID Vulnerability Allowing Global Admin Impersonation
- New EDR-Freeze tool uses Windows WER to suspend security software
- Microsoft Entra ID flaw allowed hijacking any company's tenant
- ShadowLeak Radware Uncovers Zero-Click Attack on ChatGPT
- Large-Scale Attack Targeting Macs via GitHub Pages Impersonating Companies to Attempt to Deliver Stealer Malware
- ShinyHunters claims 1.5 billion Salesforce records stolen in Drift hacks
- Apple backports fix for actively exploited CVE-2025-43300
- 40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
- FBI warns of UNC6040, UNC6395 hackers stealing Salesforce data
- Samsung patches actively exploited zero-day reported by WhatsApp
- Huntress's 'hilarious' attacker surveillance splits infosec community
- DELMIA Factory Software Vulnerability Exploited in Attacks
- Popular AI chatbots leaking data millions of users could be affected
- Malicious npm Code Reached 10% of Cloud Environments
- KillSec Ransomware is Attacking Healthcare Institutions in Brazil
- ICS Patch Tuesday Rockwell Automation Leads With 8 Security Advisories
- Microsoft Patch Tuesday, September 2025 Edition
- GhostAction Supply Chain Attack Compromises 3000+ Secrets
- iCloud Calendar abused to send phishing emails from Apple’s servers
- US offers $10 million bounty for info on Russian FSB hackers
- Google fixes actively exploited Android flaws in September update
- Azure AD Credentials Exposed in Public App Settings File
- Supply-chain attack hits Zscaler via Salesloft Drift, leaking customer info
- Hidden Commands in Images Exploit AI Chatbots and Steal Data
- WhatsApp patches vulnerability exploited in zero-day attacks
- Velociraptor incident response tool abused for remote access
- Nissan confirms design studio data breach claimed by Qilin ransomware
- Hook Version 3 The Banking Trojan with The Most Advanced Capabilities
- Critical Docker Desktop flaw lets attackers hijack Windows hosts
- Anatsa Android Banking Trojan Now Targeting 830 Financial Apps
- APT36 hackers abuse Linux .desktop files to install malware in new attacks
- Hackers Weaponize QR Codes Embedded with Malicious Links to Steal Sensitive Information
- Major password managers can leak logins in clickjacking attacks
- New Research Links VPN Apps, Highlights Security Deficiencies
- Legitimate Chrome VPN Extension Turns to Browser Spyware
- Web Hosting Firms in Taiwan Attacked by Chinese APT for Access to High-Value Targets
- Researcher to release exploit for full auth bypass on FortiWeb
- Critical RCE Vulnerability in Cisco Firewall Management Software Under Active Exploitation
- PhantomCard New NFC-driven Android malware emerging in Brazil
- North Korean Kimsuky hackers exposed in alleged data breach
- Netherlands Citrix NetScaler Flaw CVE-2025-6543 Exploited to Breach Critical Organizations
- Cybersecurity Firm Profero Cracks DarkBit Ransomware Encryption
- New Win-DDoS Flaws Let Attackers Turn Public Domain Controllers into DDoS Botnet via RPC, LDAP
- Google's August Patch Fixes Two Qualcomm Vulnerabilities Exploited in the Wild
- U.S. Judiciary confirms breach of court electronic records service
- Google suffers data breach in ongoing Salesforce data theft attacks
- SonicWall investigates possible zero-day amid Akira ransomware surge
- Cursor IDE Persistent Code Execution via MCP Trust Bypass
- Cisco Says User Data Stolen in CRM Hack
- Mozilla flags phishing wave aimed at hijacking trusted Firefox add-ons
- LegalPwn Attack Tricks GenAI Tools Into Misclassifying Malware as Safe Code
- Fake Telegram Premium Site Distributes New Lumma Stealer Variant
- Critical Vulnerability in NestJS Devtools Localhost RCE via Sandbox Escape
- AI-powered Cursor IDE vulnerable to prompt-injection attacks
- Dahua Camera flaws allow remote hacking. Update firmware now
- UNC2891 Bank Heist Physical ATM Backdoor & Linux Forensic Evasion Evasion
- ShinyHunters behind Salesforce data theft attacks at Qantas, Allianz Life, and LVMH
- Struts Devmode in 2025? Critical Pre-Auth Vulnerabilities in Adobe Experience Manager Forms
- Organizations Warned of Exploited PaperCut Flaw
- Attackers Actively Exploiting Critical Vulnerability in Alone Theme
- ToxicPanda The Android Banking Trojan Targeting Europe
- ToolShell An all-you-can-eat buffet for threat actors
- US nuclear weapons agency hacked in Microsoft SharePoint attacks
- How We Accidentally Discovered a Remote Code Execution Vulnerability in ETQ Reliance
- Microsoft Fix Targets Attacks on SharePoint Zero-Day
- Livewire Flaw Puts Millions of Laravel Apps at Risk of RCE Attacks
- Four new Android spyware samples linked to Iran's intel agency
- Dell confirms breach of test lab platform by World Leaks extortion group
- Follow-Up Cisco Updates Advisory with Additional Maximum Severity Unauthenticated RCE in ISE and ISE-PIC (CVE-2025-20337)
- The Linuxsys Cryptominer
- Mobile Forensics Tool Used by Chinese Law Enforcement Dissected
- Flaw in Signal App Clone Could Leak Passwords — GreyNoise Identifies Active Reconnaissance and Exploit Attempts
- Tracking Protestware Spread 28 npm Packages Affected by Payload Targeting Russian-Language Users
- Threat Actors Exploit SVG Files in Stealthy JavaScript Redirects
- The Good, the Bad, and the Encoding An SS7 Bypass Attack
- Google Gemini Tricked Into Showing Phishing Message Hidden in Email
- Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
- Nvidia warns its GPUs – even Blackwells – need protection against Rowhammer attacks
- Ransomware Delivered Through GitHub A PowerShell-Powered Attack
- Fix the Click Preventing the ClickFix Attack Vector
- AMD Warns of New Transient Scheduler Attacks Impacting a Wide Range of CPUs
- PerfektBlue 1-click RCE attack
- Critical RCE Vulnerability in mcp-remote CVE-2025-6514 Threatens LLM Clients
- Attackers Inject Code into WordPress Theme to Redirect Visitors
- Malicious pull request infects VS Code extension
- Animation-Driven Tapjacking on Android
- Hackers abuse leaked Shellter red team tool to deploy infostealers
- Ingram Micro outage caused by SafePay ransomware attack
- Critical Sudo bugs expose major Linux distros to local Root exploits
- Data breach reveals Catwatchful ‘stalkerware’ is spying on thousands of phones
- Okta observes v0 AI tool used to build phishing sites
- Critical ICS vulnerabilities threaten Mitsubishi Electric and TrendMakers hardware across commercial facilities
- Zero-day Bluetooth gap turns millions of headphones into listening stations
- Taking the shine off BreachForums
- Supply Chain Incident Imperils Glasgow Council Services and Data
- Gogs Remote Command Execution Vulnerability (CVE-2024-56731)
- Decrement by one to rule them all AsIO3.sys driver exploitation
- Cisco ISE Vulnerability Allows Remote Attackers to Execute Malicious Commands
- Realtek Bluetooth Flaw Allows Attackers to Launch DoS Attacks During Pairing
- Don't panic, but it's only a matter of time before critical 'CitrixBleed 2' is under attack
- Cybercriminals Abuse Open-Source Tools To Target Africa’s Financial Sector
- SparkKitty, SparkCat’s little brother A new Trojan spy found in the App Store and Google Play
- Threat actor Banana Squad exploits GitHub repos in new campaign
- Famous Chollima deploying Python version of GolangGhost RAT
- Washington Post's email system hacked, journalists' accounts compromised
- VMOSX Data Leak Info of Thousands of Mac Cloud Users Potentially Exposed Online
- Tenable Fixes Three High-Severity Flaws in Vulnerability Scanner Nessus
- Kali Linux 2025.2 released with 13 new tools, car hacking updates
- Paraguay is Being Targeted by Cybercriminals - 7.4 Million Citizen Records for Sale
- Zero-Click AI Vulnerability Exposes Microsoft 365 Copilot Data Without User Interaction
- New ‘SmartAttack’ Steals Air-Gapped Data Using Smartwatches
- Inside FluxPanel How Phishing Enables Real-Time Ecommerce Checkout Hijacks
- Don't Get Caught in the Headlights - DeerStealer Analysis
- Over 80,000 servers hit as Roundcube RCE bug gets rapidly exploited
- NTLM reflection is dead, long live NTLM reflection! – An in-depth analysis of CVE-2025-33073
- Attackers Unleash TeamFiltration Account Takeover Campaign (UNK_SneakyStrike) Leverages Popular Pentesting Tool
- The Evolution of Linux Binaries in Targeted Cloud Operations
- Security Flaws in eMagicOne Store Manager for WooCommerce in WordPress (CVE-2025-5058 and CVE-2025-4603)
- Flask Phishing Kit Targeted Credential Theft Using Open-Source Technology
- Coordinated Brute Force Activity Targeting Apache Tomcat Manager Indicates Possible Upcoming Threats
- iMessage Zero-Click Attacks Suspected in Targeting of High-Value Individuals
- Two Botnets, One Flaw Mirai Spreads Through Wazuh Vulnerability
- Sleep with one eye open how Librarian Ghouls steal data by night
- PayU Plugin Flaw Allows Account Takeover on 5000 WordPress Sites
- Grocery wholesale giant United Natural Foods hit by cyberattack
- Operation DRAGONCLONE Chinese Telecommunication industry targeted via VELETRIX & VShell malware
- Analysis of the latest Mirai wave exploiting TBK DVR devices with CVE-2024-3721
- Unmasking Insecure HTTP Data Leaks in Popular Chrome Extensions
- ClickFix Attack Exploits Fake Cloudflare Turnstile to Deliver Malware
- Android Spyware Alert! Fake government app targeting Android users in India!
- Fake WordPress Caching Plugin Used to Steal Admin Credentials
- Criminals Bribed Outsourced Contractors to Steal Coinbase User Data
- Victims risk AsyncRAT infection after being redirected to fake Booking.com sites
- Qualcomm fixes three Adreno GPU zero-days exploited in attacks
- XSSing TypeErrors in Safari
- Zanubis in motion Tracing the active evolution of the Android banking malware
- MATLAB dev confirms ransomware attack behind service outage
- DragonForce actors target SimpleHelp vulnerabilities to attack MSP, customers
- Bypassing MTE with CVE-2025-0072
- CrackArmor - Critical AppArmor Flaws Enable Local Privilege Escalation to Root