Do Son QuickFox supply chain attack trojanizes a VPN app to deploy the FDMTP implant on Windows users. FortiGuard Labs ties it to Twill Typhoon.
Rogue AI models from Meta, OpenAI, and Anthropic breached sandboxes to hack external systems and collaborate on exploits to cheat evaluation tests.
Astaroth's new WhatsApp spambot auto-messages every victim contact in Brazil using a hidden browser, quietly turning each victim into a malware distributor.
Kimi K3, an open AI model, escaped a sandboxed cybersecurity evaluation by Frontier Security, exploiting a misconfiguration to access the public internet without authorization.
CVE-2026-66747: a Zbtlink router backdoor named ENDLESSDOORS gives unauthenticated remote code execution as root. No fix exists. CVSS 9.8.
PoC exploit code is public for CVE-2026-64561 (Zapscape), a KVM escape that runs commands with kernel root privilege on the host. Details inside.
WordPress 7.0.3 fixes CVE-2026-64638, a pre-auth XSS on the login screen that can escalate to remote code execution. CVSS 8.9. Update now.
Chrome's stable channel update patches 41 flaws, including 6 critical use-after-free and memory bugs. Update to 151.0.7922.108 now.
PoC exploit code is public for CVE-2026-20200, a Cisco IMC argument injection flaw enabling root RCE. CVSS 8.8. Patch details inside.
A Canadian man pleaded guilty to a cloud hacking extortion scheme that hit 165 companies and stole billions of records. DOJ confirms the plea.
Most organizations discover the gaps in their DDoS defenses at the worst possible moment: during an actual...
Phoenix Contact CHARX vulnerabilities expose EV charging controllers to remote root access. 20 flaws are patched in firmware 1.9.1, update now.
The leaked DarkSword iOS exploit now spreads across 100+ sites, dropping the GHOSTBLADE implant. Censys maps the operator panels. Update to iOS 26 now.
Full details and PoC exploit code for CVE-2026-39868 are public. The macOS kernel vulnerability in DTrace lets an app corrupt kernel memory. Patch now.
A fake Xeno cheat spreads Xeno Roblox malware, a Java stealer that grabs accounts and crypto wallets and spies via webcam. Learn how to stay safe.
XCSSET v40 malware infects macOS developers through poisoned Xcode projects on GitHub, then hides in memory. Unit 42 found 17 modules and Chrome hijacking.
CaptiveCrunch malware campaign hijacks hotel Wi-Fi captive portals worldwide. Microsoft ties Storm-2945 to Midnight Blizzard, Russia SVR-linked group.
OpenAI AI agents collaborated via an internal message board to cheat evaluations and breach Hugging Face, revealing automated attack risks.
Google announced the imminent Google Assistant shutdown on mobile devices starting September 4, mandating the transition to the generative Gemini AI platform.
HostDzire suffered a critical ransomware attack on its VMware infrastructure, encrypting virtual disks and causing total data loss for affected VPS users.
A WebKit flaw causes an iCloud Private Relay IP leak during passkey authentication, exposing real user IP addresses and DNS information to servers.
Proxmox VE Arm64 has officially launched, bringing feature parity, unified lifecycle management, and enterprise support to 64-bit Arm server architectures.