China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE Ravie LakshmananSep 15, 2026Vulnerability / Cyber Espionage A Chinese threat actor has been…
Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports Swati KhandelwalSep 14, 2026Vulnerability / Data Security A flaw in Telegram…
3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials Swati KhandelwalSep 14, 2026Network Security / Cyber Attack An attacker was…
Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries Ravie LakshmananSep 14, 2026Cyber Espionage / Vulnerability A Chinese threat…
New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing Swati KhandelwalSep 14, 2026Vulnerability / Cloud Security Researchers have disclosed a…
WordPress Adds Automated Plugin Reviews to Block High-Risk Updates Before Distribution Ravie LakshmananSep 14, 2026Web Security / Vulnerability WordPress has announced it's…
AI Changed the Exposure Problem. Validation Needs to Change With It. The Hacker NewsSep 14, 2026Vulnerability / Penetration Testing There's a lot…
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users Ravie LakshmananSep 14, 2026Malware / Browser Security A malicious cross-store Twitch…
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data Ravie LakshmananSep 13, 2026Cloud Security / Identity Security Microsoft has…
CISA Adds 5 Actively Exploited Artifactory, ScreenConnect, and RouterOS Flaws to KEV Ravie LakshmananSep 12, 2026Vulnerability / Enterprise Security The U.S. Cybersecurity…