Critical Pre-Auth RCE in ChromaDB Threatens AI Infrastructure 🚨 A max-severity vulnerability (CVE-2026-45829, CVSS 10.0) has been disclosed affecting ChromaDB, the widely used open-source vector d...
Urgent Security Update for Drupal Admins 🚨 Administrators of the Drupal open-source content management platform are rushing to install an emergency patch issued today to fix a highly critical SQL ...
Apple Server Schematics Stolen in May 2026 Foxconn Cyberattack 🚨 On May 12, AppleInsider reported that the ransomware group Nitrogen hacked into Foxconn facilities in North America. Initially, it ...
WantToCry Ransomware Evades Detection 🚨 Attacks using WantToCry ransomware are targeting exposed Server Message Block (SMB) ports and utilizing remote encryption to minimize the chance of detectio...
The Expendable Extension Name: Azure VMAccess Naming Chaos, Password Resets, and a Detection Gap In early April, the Sysdig Threat Research Team (TRT) identified a detection flaw in the process fo...
Major Data Breach Alert 🚨 In a recent and significant development, the dark web carding forum B1ack’s Stash has released approximately 4.6 million stolen credit card records for free. This remarka...
Trapdoor Android Ad Fraud Scheme Hits 659 Million Daily Bid Requests 🚨 Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Andro...
Important Security Update Alert 🚨 Drupal has issued an alert stating that it intends to release a core security release for all supported branches on May 20, 2026, from 5-9 p.m. UTC. The Drupal Se...
Disrupting Fox Tempest: A Cybercrime Service Today, Microsoft unsealed a legal case in the US District Court for the Southern District of New York targeting a cybercrime service known as Fox Tempe...
Verizon 2026 Data Breach Investigations Report (DBIR) A data breach is a security incident where unauthorized individuals gain access to sensitive, protected, or confidential data. The Verizon Dat...
Pwn2Own Berlin 2026 Closes With $1.3 Million in Zero-Day Payouts 🚀 The highly anticipated Pwn2Own Berlin 2026 hacking competition concluded on 16 May 2026, following three days of intense activity...
Linus Torvalds Critiques AI-Powered Bug Hunters for Linux Security Linux kernel boss Linus Torvalds has declared that the project’s security mailing list has become “almost entirely unmanageable” ...
Dutch Cops’ Shame Game Works Wonders 🚔 The Netherlands police’s scheme to unmask and shame scammers into submission is proving highly successful, with 74 of its 100 most wanted now known to invest...
ShinyHunters Hack 7-Eleven: Franchisee Data and Salesforce Records Exposed 🚨 7-Eleven has confirmed a data breach after the ShinyHunters hacking group claimed it stole more than 600,000 Salesforce...
New Reaper Malware Alert 🚨 A malicious new malware is targeting macOS users, disguised as a critical system update and popular workplace software. Cybersecurity firm SentinelOne’s research unit, S...
INTERPOL Operation Ramz Disrupts MENA Cybercrime Networks 🚨 INTERPOL has coordinated a first-of-its-kind cybercrime crackdown across the Middle East and North Africa (MENA) that led to 201 arrests...
How a Government Contest Launched a Revolution in AI-Based Bug Hunting These increasingly sophisticated open-source tools are the product of the Defense Advanced Research Projects Agency’s (DARPA)...
Hackers Actively Exploiting Critical NGINX RCE Vulnerability in the Wild Security researcher Patrick Garrity from VulnCheck revealed that threat actors are actively targeting CVE-2026-42945, a hea...
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2026-7373 Rapid7 - Metasploit Pro...
Grafana Rejects Ransom Demand After Source Code Theft 🚨 Grafana Labs has reported that an attacker gained access to part of its GitHub environment using a compromised token, allowing them to downl...