Do Son
At a glance Actor TeamPCP Activity type Software supply chain compromise Targets Enterprise developers, security tools Scale...
News
IBM security researchers discovered six severe Langflow OSS vulnerabilities. These flaws allow attackers to execute arbitrary code,...
TL;DR CISA published an advisory for five DCMTK vulnerabilities on 30 June 2026. The DICOM toolkit powers...
Sony recently announced that it will cease production of physical game discs for new releases starting in...
Following the restoration of Claude Fable 5, Anthropic reset the weekly quotas for all premium subscribers, permitting...
For a considerable epoch, Google Chrome has routinely concealed extension icons by defaulting them into a collapsed...
Claude Fable 5 is back online. Developers using Claude Code can access the model through their existing...
At a glance Actor Suspected North Korean Lazarus-linked group (attribution by TTP similarity) Activity npm supply chain...
Unsigned software installers are distributing a dangerous new malware strain that quietly intercepts digital currency transactions. Security...
Yesterday, reports emerged that kernel.org had deleted all hosted kernel files. Every archived and current kernel package...
After nearly a decade of legal battles, the EU’s antitrust case against Google has finally reached its...
At a glance Malware family Glitch SPY (Android RAT and builder platform) Threat actor Unattributed; operator unidentified...
Security analysts recently discovered the ToddyCat APT Umbrij tool. It hijacks corporate Gmail accounts without triggering standard...
TL;DR CVE-2026-48282, a critical CVSS 10 ColdFusion arbitrary code execution vulnerability, is under active attack. Hackers are...
Security researchers publicly disclosed a critical vulnerability in Control Web Panel alongside proof-of-concept exploit code. This flaw,...
TL;DR Researchers disclosed two UltraVNC repeater vulnerabilities in the tool’s HTTP admin server. One allows arbitrary code...
TL;DR WatchGuard has patched seven WatchGuard Firebox vulnerabilities in its Fireware OS. The worst, CVE-2026-13368 (CVSS 9.2),...
TL;DR Apache patched nine Apache ActiveMQ vulnerabilities in version 6.2.7. Most cause denial of service, and several...
TL;DR Icinga patched three Icinga 2 vulnerabilities on 29 June 2026. Two let an unauthenticated attacker take...
TL;DR CISA published an advisory for five StoneFly Storage Concentrator vulnerabilities on 30 June 2026. Two rate...
TL;DR Researchers at HawkTrace published full technical details and proof-of-concept code for a Microsoft Exchange vulnerability tracked...
TL;DR Attackers are exploiting a Citrix NetScaler vulnerability in the wild, tracked as CVE-2026-8451 (CVSS 8.8). The...