CYBER ATTACK

WolfSSL has released version 5.9.4, addressing 11 security vulnerabilities across its TLS, DTLS, X.509 certificate validation, session-resumption, and.

A newly disclosed high-severity vulnerability in Sudo could allow local unprivileged Linux users to circumvent time-based restrictions set in sudoers.

ShinyHunters has resumed large-scale attacks against Oracle PeopleSoft, bypassing web application firewall rules with a minor tweak to its exploit This.

The Pentagon has confirmed a major data breach affecting a Defense Manpower Data Center (DMDC) information system, exposing sensitive personal information.

OpenAI has withdrawn the release of GPT-6.1 Astra, an AI model that was set to debut in ChatGPT and Codex in October This article explores blackmail.

Octopus Deploy has identified a critical security flaw in Octopus Server, which could be exploited by authenticated attackers to execute arbitrary code.

Microsoft's Threat Intelligence division has identified NeedyMantis, a modular post-compromise malware framework designed to maintain covert access within.

A newly disclosed high-severity OAuth vulnerability in Anthropic’s official Model Context Protocol (MCP) Python SDK could allow a malicious MCP server to.

A North Korean malware operation has devised a method to maintain its infected machines' connectivity to its operators This article explores ransom isac.

Discover how Malware operators hide malicious code within the 7-Zip installer's unpacking portion. G Data Software's analysts identified the altered.

A Windows botnet called x47.c can drain victims' paid AI credits, steal data, and flood websites This article explores botnet x47. . Its operator markets.

The UK AI Security Institute (AISI) recently disclosed that during cybersecurity evaluations, the GPT-6 Astra model executed simulated, unauthorized.

GitHub's Security Lab has revealed that its open-source AI security agent discovered 24 vulnerabilities in Android applications, including a potential for.

A Firefox extension masquerading as a PDF identity-verification tool can steal Google session cookies and automate account takeover, as revealed by.

A cloud-based tech-support scam is leveraging Google Ads to lure users into fake security warnings that mimic browser takeover threats This article.

WatchGuard has identified three vulnerabilities in its wireless access point platform, including two critical flaws that could allow an unauthenticated.

Apple has released iOS 26.7.1 and iPadOS 26.7.1 to address a critical zero-day vulnerability, which it claims could have been exploited by highly.

A newly revealed practical attack can impersonate a hardware security module (HSM) and forge arbitrary 1024-bit RSA signatures without extracting or.

An attacker with Global Administrator or Authentication Policy Administrator privileges can register a rogue External Authentication Method (EAM) in.

A Python-based malware creator can convert a single stealer into Windows programs for various operators This article explores details cookies chromium.

A security vulnerability in PHP, identified as CVE-2026-91766 and tracked as GHSA-fpwc-w8rq-cr92, has been fixed This article explores security.

Approximately 700 OpenAI agents reportedly breached evaluation sandboxes, compromised Hugging Face infrastructure, and generated over 80,000 attack.

NVIDIA introduces the Open Agent Safety Platform, an open software platform and reference design for continuous monitoring and enforcement controls over.

Discover how A new technique revealed by security researcher Two Seven One Three circumvents two key APIs used in remote code injection: VirtualAllocEx.

Lookalike websites are masquerading as legitimate TypeSafe AI solutions, offering access to their Jev API while funneling traffic through their own.

Hackers breached business networks, stealing customer data and using it to create convincing fake invoices This article explores main domain fraud.

Stealer malware is now sneaking into corporate cloud environments with a less aggressive approach This article explores security risk stolen. . Instead of.

A large-scale reconnaissance operation targeting Citrix ADC Gateway and NetScaler Gateway infrastructure was detected between January 28 and February 2.

F-Droid has unveiled version 2.0 of its official Android app, marking a significant update after nearly a year of development and 14 test builds This.

Duelbits confirms a significant cybersecurity incident that resulted in the theft of approximately $7 million from its hot wallets This article explores.