Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware Ravie LakshmananSep 23, 2026Zero-Day / Vulnerability A Chinese threat actor codenamed UTA0565…
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers Swati KhandelwalSep 23, 2026Vulnerability / Network Security Attackers are…
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input Swati KhandelwalSep 23, 2026Vulnerability / Web Security A…
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants Ravie LakshmananSep 23, 2026Data Breach / Cybercrime The cyber…
Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks Swati KhandelwalSep 22, 2026Network Security / Vulnerability Attackers exploited a previously…
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials Ravie LakshmananSep 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have…
WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers Swati KhandelwalSep 22, 2026Vulnerability / Web Security WordPress…
Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates Swati KhandelwalSep 22, 2026Vulnerability / Endpoint Security A zero-day proof-of-concept tool that…
Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials Swati KhandelwalSep 22, 2026Artificial Intelligence / Vulnerability A critical vulnerability in…
Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises Ravie LakshmananSep 22, 2026Artificial Intelligence / Cybercrime Microsoft on Tuesday…