Two critical CSF plugin vulnerabilities, CVE-2026-65638 and CVE-2026-65639, allow remote code execution. Patch your ConfigServer firewall immediately.
Dell patched critical Dell ObjectScale vulnerabilities, led by CVE-2026-70416. Fix these Dell ObjectScale vulnerabilities to stop remote code execution.
A Conti ransomware developer sentenced to prison for wire fraud conspiracy. Learn how this Conti ransomware developer faces justice.
GeoVision patched critical GeoVision camera vulnerabilities across its IP cameras. Patch these GeoVision camera vulnerabilities to stop attacks.
Dell patched critical Dell Networking OS10 vulnerabilities, including CVE-2026-63695. Update your Dell SmartFabric OS10 switches to prevent session theft.
GitLab patched critical GitLab vulnerabilities, led by CVE-2026-85706 with a CVSS 10.0 score. Update your server now to protect source code from exposure.
CVE-2026-28576 (CVSS 10) is a SQL injection in the Android Contacts Provider. A public PoC dumps all contacts with no permissions. Patch Android 17 now.
Wiz detected JFrog Artifactory vulnerabilities exploited in the wild. Patch JFrog Artifactory vulnerabilities now to stop remote administrative takeovers.
Learn how fake Robux generators, phishing pages and verification scams work, what warning signs to look for and how legitimate rewards differ.
Chinese hackers launch Chrome zero-day exploit chain attacks against NGOs. Learn how this Chrome zero-day exploit chain exploits patch gaps.
Researchers found a ChatGPT cross-account data leak. Find out how this ChatGPT cross-account data leak allowed attackers to steal private emails.
A disclosed OnePlus session takeover vulnerability threatens OnePlus 13R Android security, allowing malicious apps to steal tokens and modify user data.
Discover how Apple gift card chips in iOS 27 will stop retail fraud. Learn about the new tap to redeem feature and enhanced security verifications.
Google Photos trash retention drops from 60 to 30 days. Learn how this new policy affects your cloud storage and data recovery options today.
The Windows 11 Age API lets apps check a user's age bracket without exposing their birthday, meeting new age verification laws like California's.
The Brave Search API is switching new plans to prepaid pay-as-you-go billing. Free users still get $5 monthly credit for about 1,000 searches.
The ted backdoor is DPRK Linux malware hidden inside HAProxy. It pairs with curlRAT to spy on South Korean media and automotive firms, Rapid7 reports.
Microsoft uncovered an ASCII smuggling phishing evasion campaign hitting email inboxes. Learn how attackers weaponize invisible Unicode tags.
Threat analysts reveal Kimsuky uses AI agent opencode to mass-produce phishing decoys. Discover how the group leverages AI to enhance its LNK attacks.
NVIDIA fixed critical Triton Inference Server vulnerabilities. Patch your Triton Inference Server vulnerabilities now to stop denial of service attacks.