CYBER ATTACK

A viral video shows a new and surprisingly easy way to find North Korean state-sponsored IT workers trying to get into Western companies. The video shows.

A new attack campaign is actively going after open-source repositories on GitHub by hiding harmful code in normal CI build configurations This article.

Discover how OpenSSL has put out a security update for April 2026 that fixes seven holes. If you have a vulnerable version of OpenSSL 3.x, you should.

Written in Python 3, METATRON is an open-source framework for penetration testing This article explores metatron open source. . It combines automated.

Discover how Cybercriminals are taking advantage of people's growing worries about the availability of LPG cylinders by sending out false messages on SMS.

On March 30, 2026, a big JavaScript library was turned into a weapon This article explores attackers poison axios. . Attackers put poison in Axios' npm.

On April 1, 2026, a huge theft happened on the largest decentralized perpetual futures exchange on the Solana blockchain This article explores korea.

After threat actors used the ILSpy WordPress domain on April 6, 2026, a new supply chain attack went after developers. Instead of giving visitors real.

A targeted attack on the official WordPress site for ILSpy, a popular open-source .NET decompiler used by developers, has made it possible for malware to.

Discover how In 2025, Google broke previous payout records for the Vulnerability Reward Program (VRP) on its 15th anniversary. The tech giant gave $17.

Google is making a big change to its Chrome browser that will improve how well audio and video elements load slowly by default This article explores.

Discover how A complex phishing campaign is going after businesses in South Korea. It uses bad Windows shortcut (LNK) files and GitHub as a secret Command.

Researchers at NDSS 2026 show off a secret way to listen in on conversations without being seen This article explores hidden microphones attack. . The.

The FBI and the U.S This article explores routers russian hackers. . Department of Justice carried out an operation called "Operation Masquerade" that.

On April 1, 2026, there was a serious security breach at Drift Protocol, the biggest decentralized futures exchange on the Solana network. Hackers stole.

North Korea's cyber program has changed a lot in how it makes and spreads bad software This article explores north korea cyber. . They don't just use one.

Asim Viladi Oglu Manizada and his team of security researchers found two zero-day bugs in the Common Unix Printing System. The advanced attack chain turns.

A new high-severity vulnerability in Docker Engine lets attackers get around authorization controls This article explores vulnerability docker engine.

CVE-2026-34976 is the name of a serious security hole that has been found in Dgraph, an open-source graph database. This serious flaw has a perfect CVSS.

A serious security hole in Anthropic's Claude Code AI agent lets bad people get around user-set deny rules without anyone knowing This article explores.

It has been found that Claude Code, Anthropic's AI coding assistant, has a serious security hole This article explores problem ai security. . This flaw.

There is a serious security flaw in Apache ActiveMQ Classic that has been around for ten years This article explores flaw apache activemq. . The Claude AI.

CISA has added a serious flaw in TrueConf software to its list of Known Exploited Vulnerabilities (KEV) This article explores flaw trueconf software.

The Claude Mythos Preview AI model is the result of a partnership between AWS and Anthropic as part of Project Glasswing. This special AI tool will be.

The Apache Software Foundation has put out emergency security patches for two major flaws in the Apache Traffic Server This article explores safe version.

The Shadowserver Foundation has sent out an urgent warning to FortiClient Enterprise Management Server (EMS) administrators after finding more than 2,000.

A major attack on the JavaScript ecosystem's software supply chain has happened after a malicious dependency injection into the Axios NPM package, which.

When you open LinkedIn in Chrome, hidden JavaScript scans your computer without your knowledge or permission This article explores linkedin surveillance.

Anthropic accidentally made the whole source code for Claude Code, its main terminal-based coding assistant, public. The leak of Claude Code on GitHub has.

Discover how Anthropic has officially blocked third-party AI agents from accessing its Claude subscription levels. This change means that people can't use.