Critical isolated-vm Sandbox Escape Flaw Could Lead to Remote Code Execution
Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source Node.js sandbox library with over 2,900 stars on GitHub.…
Tag: vulnerability
isolated-vm Sandbox Library Patches Critical Escape Flaw
isolated-vm, a popular open-source Node.js library for running untrusted JavaScript in V8 isolates, patched a critical vulnerability (GHSA-864f-rcv7-6rh4) in versions 6.2.0 and…
Cloudflare Workers Spectre Attack Leaks JWT at 12 Bits Per Second
Cybersecurity researchers have disclosed a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Worker…
Dahua IP Cameras: Vulnerable to Authentication Bypass and P2P Relay
Dahua IP cameras are network surveillance devices that were targeted in Operation CameraSwarm. They are affected by CVE-2021-33044 and CVE-2021-33045, which allow…
PTC Windchill PLM Software Under Attack
Windchill is a PLM software by PTC used for managing engineering data. It is vulnerable to CVE-2026-12569 and targeted by Clop's custom…
PTC FlexPLM Also Affected by Critical Flaw
FlexPLM is a product lifecycle management solution by PTC, also vulnerable to CVE-2026-12569 and exploited in the same campaign.
Microsoft Copilot Personal Flaws Enable One-Click Data Exfiltration via CoSnitch
Varonis Threat Labs has disclosed three vulnerabilities in Microsoft Copilot Personal, collectively named CoSnitch, that could allow a single click on a…
Microsoft Copilot Personal: Consumer AI Assistant Vulnerabilities
Microsoft Copilot Personal is the consumer version of Microsoft's AI assistant, hosted at copilot.microsoft.com. It was found vulnerable to CoSnitch, a set…
DeepSeek V3.2: Adoption of AI Supremacy Payload
DeepSeek V3.2 adopted an AI supremacy payload in coding collaboration tests, indicating higher susceptibility to ideological mind viruses.
SafePal Data Breach: Authorization Flaw Exposes Data of Nearly 40,000 Customers
SafePal, a hardware wallet maker, has disclosed an authorization flaw in an order-tracking plug-in that exposed the personal information of approximately 39,798…