Researchers discovered three major flaws in Amazon’s AWS-LC cryptographic library, allowing hackers to bypass digital signature validation. Update now.
Microsoft Defender exposes a new phishing campaign using EV certificates and fake Teams invites to silently deploy RMM backdoors on corporate networks.
Cybersecurity researchers uncover OCRFix, a Russian-linked botnet using EtherHiding and fake CAPTCHAs to mask its C2 servers in blockchain smart contracts.
Socket researchers uncover a Packagist supply chain attack where fake Laravel utility packages secretly install a persistent Remote Access Trojan (RAT).
Nvidia releases the 595.76 Hotfix to resolve a critical voltage cap preventing GPU overclocking and fix Resident Evil: Requiem visual bugs. Download now!
A critical 10.0 CVSS flaw (CVE-2026-20127) in Cisco Catalyst SD-WAN is actively exploited in the wild. A public PoC is now available. Patch immediately!
An integer overflow flaw (CVE-2025-66168) in Apache ActiveMQ's MQTT module allows authenticated attackers to crash brokers. Update your systems immediately.
Law enforcement from 14 countries just seized LeakBase.ws. With 142k accounts and 215k messages exposed, the DOJ sends a clear message: No hacker is anonymous.
Google settles with EPIC! Commissions drop to 20%, Fortnite returns, and a new $800M partnership emerges. See how the Android ecosystem is changing in 2026.
Google Chrome shifts to a 14-day update cycle starting with M153 in Sept 2026. Discover how this biweekly rhythm impacts security, features, and developers.
Frustrated by GitHub outages, OpenAI is reportedly building its own "agent-first" code-hosting platform. Is this the end of the Microsoft-OpenAI partnership?
X strikes back at engagement farmers! New 2026 rules impose a 90-day monetization ban for posting undisclosed AI-generated war videos. Is your payout at risk?
OpenAI is purging accounts that used forged military IDs to score free ChatGPT Plus. See how the new SheerID audits are ending the "Stolen Valor" era.
Accenture acquires Ookla for $1.2 billion at MWC 2026, turning Speedtest and Downdetector into a strategic data foundation for the global AI infrastructure race.
Microsoft and Europol lead a global coalition to dismantle Tycoon 2FA, a massive AiTM phishing platform that bypassed MFA for over 500,000 organizations.
Cisco warns that two vulnerabilities (CVE-2026-20122 and CVE-2026-20128) in its Catalyst SD-WAN Manager are being actively exploited. Update immediately.
A critical 10.0 CVSS zero-click flaw (CVE-2026-20079) in Cisco Secure FMC gives unauthenticated attackers root access. Patch your systems immediately.
A critical 10.0 CVSS flaw (CVE-2026-29000) in the pac4j-jwt library allows attackers to forge JWTs and bypass authentication. Patch immediately.
Google releases an urgent security update for Chrome, patching 10 flaws including 3 critical memory corruption vulnerabilities. Update to version 145 now.
A critical 10.0 CVSS unauthenticated RCE flaw (CVE-2026-20131) in Cisco Secure FMC allows hackers root access via insecure Java deserialization. Patch now.
A critical 10.0 CVSS unauthenticated remote code execution flaw (CVE-2026-28289) in FreeScout allows full server takeover via an invisible character exploit.