Russia Used Cellebrite on Jailed Activist’s iPhone Months After Sales Cutoff
Russian authorities used Cellebrite's UFED forensic tools to break into the iPhone of detained opposition activist Andrey Pivovarov in June 2021, three…
Tag: CVE-2026-11645
Google Details Turla’s New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks
Google Threat Intelligence Group (GTIG) has attributed a previously undocumented .NET backdoor named STOCKSTAY to the Russian state-sponsored threat actor Turla. The…
Anthropic Launches Claude Fable 5 and Mythos 5: Dual AI Models with Cyber Safeguards
On June 9, Anthropic released Claude Fable 5, its most capable AI model, alongside a restricted version, Claude Mythos 5, designed for…
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs
Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs Ravie LakshmananJun 10, 2026Vulnerability / Zero-Day Microsoft on Tuesday released…
Automated Pentest Gaps: What Your Report Misses and How to Fix It
Automated penetration testing is a staple of security validation, but a clean report may create a false sense of security. This article,…
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog following reports…
Langflow Vulnerability CVE-2026-5027 Exploited for Unauthenticated RCE
A high-severity path traversal vulnerability in Langflow, designated CVE-2026-5027 (CVSS 8.8), is being actively exploited in the wild. Discovered by Tenable, the…
Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities
Ivanti, Fortinet, and SAP have released security patches addressing multiple critical vulnerabilities that could lead to arbitrary code execution and information disclosure.Fortinet…
China-Linked JDY Botnet Expands to Over 1,500 Devices for Cyber Reconnaissance
Cybersecurity researchers at Lumen's Black Lotus Labs have identified a significant expansion of the JDY botnet, a covert network linked to China-nexus…
GitHub to Disable npm Install Scripts by Default to Combat Supply Chain Attacks
GitHub has announced significant security changes for npm version 12, set to release next month, aimed at mitigating software supply chain attacks.…