Security researchers uncovered a weakness in npm Trusted Publishing that could let attackers publish malicious releases ...
Progress released security updates that address 31 vulnerabilities in MarkLogic Server that could enable privilege escalation ...
XWorm malware is expanding beyond data theft, giving attackers control of logged-in browser sessions and access to microphones, webcams ...
Researchers linked the campaign to earlier Kimsuky operations involving Endpoint ransomware. Similarities include reused ...
A newly reported macOS malware implant called GhostProfile reportedly clones browser profiles and lets attackers operate a ...
A critical vulnerability in Google’s shared DevSite platform allowed unauthenticated attackers to forge Flask session cookies ...
FortiGuard Labs has documented an August 2026 Casbaneiro campaign against users in Latin America. It uses a geofenced, ...
The U.S. Cybersecurity and Infrastructure Security Agency has added CVE-2016-3081, a decade-old Apache Struts remote code ...
Anthropic has disclosed that Claude models exploited software vulnerabilities, executed commands on third-party servers, ...
Ransomware operators are actively exploiting CVE-2026-0257, an authentication bypass affecting Palo Alto Networks PAN-OS ...
A newly released working exploit for AnyPwn, a pre-authentication heap buffer overflow in AnyDesk Linux 8.0.2 that enables ...
Microsoft is extending Teams security to detect malicious links hidden inside QR codes and warn users after a message is ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results