Do Son The DOJ charged 17 Iranians in a Mabna Institute cyber theft campaign that stole 31TB of research from universities for the IRGC.
CISA added four exploited flaws to its KEV Catalog, hitting SharePoint, VMware vCenter, macOS, and Windows IKE. Patch by August 21.
A critical IBM remote code execution flaw (CVE-2026-17482, CVSS 9.8) allows attackers to compromise workstations. Discover how to apply the software patch.
Google's Chrome security update patches 15 flaws, including two critical buffer overflows in WebGL and Dawn. Update to 151.0.7922.169 now.
Kaspersky uncovered the Armored Likho Still Toolkit. Read our Armored Likho Still Toolkit analysis to explore the Telegram stealer and audio spying tools.
YouTube announced a massive overhaul of its global view count metric. Discover how counting immediate clicks affects creators, revenue, and brand sponsorships.
Discover how the latest macOS Tahoe 26.7 leaks reveal Apple's unreleased hardware lineup, including the iPhone 18, camera AirPods, and new smart home hubs.
D-Link fixes 15 flaws in the DWR-M961 router, including D-Link router command injection and buffer overflow bugs like CVE-2026-71958. Update firmware now.
A public PoC for CVE-2026-68138 escalates a normal Linux user to root through a qdisc rate-table race. Details and exploit code are now disclosed.
CVE-2026-19001 (CVSS 9.5) headlines 32 MongoDB security vulnerabilities, including a BI Connector ODBC Driver flaw enabling arbitrary code execution.
Kimi Work's desktop feedback tool silently uploads raw records from five recent agent sessions alongside diagnostic logs, with no disclosure or opt-out option.
CVE-2026-71290 (CVSS 9.1) is an Apache HttpClient TLS vulnerability that lets attackers intercept and modify traffic via MITM attacks. Update to 5.6.4.
A public PoC for CVE-2026-64849, an unauthenticated MLflow SSRF (CVSS 9.3), is now live. watchTowr reports exploitation attempts. Patch to 3.15.0.
Microsoft announced that new Windows 11 installations will no longer include the WMIC component by default, primarily citing long-standing security concerns.
NIST released a human-centered cybersecurity concept paper and wants public feedback by Sept 30, 2026, to shape people-first security guidelines.
SpaceXAI officially launches the Cursor Origin beta. Discover how this AI-centric Git hosting service aims to revolutionize repository management.
A SafePal data breach exposed order information for about 39,798 customers via an order-tracking flaw. Wallet funds and keys were not affected.
North Carolina will launch Mobile ID in December 2026, adding Apple Wallet, Google Wallet, and Samsung Wallet support in early 2027, with Oklahoma, Utah, and Virginia next.
GEEKOM's official site served backdoored AMD mini PC drivers since December 2024 via a compromised legacy support page still indexed by Google.
Kimsuky AI operations reveal a North Korea threat actor testing local LLMs. Suspected state hackers are building new capabilities to automate phishing.
Windows 11's WinRE recovery environment now automatically reconnects to saved Wi-Fi networks, streamlining Quick Machine Recovery and Cloud Rebuild without IT pre-configuration.
JetBrains patched CVE-2026-75045, letting an unauthenticated attacker download YouTrack database backups. Eight flaws fixed. Update now.