Do Son
TL;DR A maximum-severity SQL injection flaw sits in the Android Contacts Provider. Tracked as CVE-2026-28576 with a...
News
Security analysts discovered active in-the-wild attacks targeting three JFrog Artifactory vulnerabilities. Threat actors chain these flaws to...
At a glance Field Details Actor or Group Suspected Chinese espionage groups UTA0560 and JungleBamboo (APT31) Activity...
At a Glance Category Details Organization OpenAI (ChatGPT) Data Exposed Private user emails, chat histories, and connected...
Preinstalled smartphone applications frequently operate with high system privileges. Security researchers recently uncovered a severe OnePlus session...
Gift card fraud remains a rampant issue for corporations like Apple in the United States. Consequently, criminal...
Google is actively modifying the trash retention policy within its widely used Photos application. According to the...
Microsoft is developing an age-awareness API for Windows 11 to satisfy the age-rating verification mandates emerging across...
Brave, the independent browser and search engine developer, recently sent a mass email announcing a change to...
At a glance Actor or group Suspected DPRK APTs (APT37 links, medium confidence) Activity type Linux backdoor,...
At a glance Field Details Actor or Group Unattributed cybercrime operators Activity Type Email filter evasion, credential...
At a glance Field Details Actor or Group Kimsuky (North Korean state-sponsored threat group) Activity Type Spearphishing,...
NVIDIA patched two high-severity security flaws in its AI inferencing platform on September 10, 2026. These critical...
Five important-severity Apache Artemis vulnerabilities affect protocol handling and core authentication mechanisms. These ActiveMQ Artemis flaws allow...
At a glance Microsoft threat analysts reported active cloud intrusions utilizing passkey social engineering to breach enterprise...
Arista Networks published four security advisories on September 9, 2026, resolving multiple critical security flaws. These critical...
Security researchers discovered a critical Secure Boot bypass vulnerability impacting multiple major hardware vendors today. This flaw...
TL;DR MongoDB fixed 24 MongoDB Server vulnerabilities in recent releases. One critical flaw can leave authorization disabled...
Okta published security advisories resolving six vulnerabilities across several enterprise identity products on September 9, 2026. These...
Researchers recently published the LSPromise exploit chain, demonstrating a complete path from a local untrusted app to...
Threat actors are actively compromising executive accounts using highly targeted Microsoft 365 vishing attacks. The PREY-0058 extortion...
Palo Alto Networks disclosed a high-severity PAN-OS buffer overflow flaw today. This vulnerability allows unauthenticated remote attackers...