Do Son Apple removes Russian apps VK and MAX from the App Store without explanation, prompting Kremlin demands and push notification cutoffs.
The European Commission issues a preliminary cloud gatekeeper designation for AWS and Azure under the DMA, sparking fierce industry opposition.
Researcher Massimiliano Oldani disclosed IPV6_FRAG_ESCAPE, a public PoC for an unprivileged IPv6 container escape on RHEL 10 and CentOS. No CVE.
Kaspersky details SharkLoader malware, which deploys Cobalt Strike Beacon in the global StrikeShark campaign via DLL sideloading and exploited apps.
Synacktiv publicly disclosed an NTLM reflection bypass, CVE-2026-24294, with PoC exploit code. It gives SYSTEM on Windows Server 2025. Patch now.
The new macOS Gaslight malware, a North Korean Rust backdoor, targets analysts with LLM prompt injection and steals sensitive keychain data.
Threat actors are using RAR archive phishing to deploy Thailand healthcare malware. The campaign targets hospitals to steal credentials and sensitive data.
Edgecution malware abuses a malicious Edge extension and native messaging to backdoor hosts. Zscaler links it to a Payouts King access broker.
Discover how the Google Gemini compute shortage forces Meta to accelerate internal AI models. Learn why Google now rents SpaceX GPUs to meet massive demand.
Google Wallet package tracking now reads Gmail receipts to show incoming deliveries on its home screen, rivaling Apple Wallet.
Attackers exploit a Cisco Unified CM RCE flaw (CVE-2026-20230) in the wild. Public PoC code now details the SSRF-to-root chain. Patch now.
This weekly CVE report covers 1,909 new vulnerabilities from June 22-28, 2026. CISA flagged six as exploited, including CVE-2026-20230.
Critical Dell Wyse vulnerabilities (CVE-2026-41120) allow unauthenticated remote code execution. Administrators must patch management suites immediately.
A critical CVSS 10 Gemini CLI vulnerability (CVE-2026-12537) allows unprivileged attackers to execute code in GitHub Actions. Patch your workflows now.
A CVSS 10 Hoppscotch mass assignment flaw leads to full server compromise. Unauthenticated attackers can exploit CVE-2026-50160 to overwrite JWT secrets.
DirtyClone (CVE-2026-43503) is a Linux kernel privilege escalation flaw rated CVSS 8.8. It abuses the page cache to turn a local user into root.
Discover the GPT-5.6 Sol model launch. OpenAI introduces Terra and Luna tiers while navigating strict US cybersecurity reviews and a restricted preview.
Anthropic's powerful Claude Mythos 5 cybersecurity AI model returns following a strict US government ban. Discover the impact on Silicon Valley.
Researchers publicly disclosed a libssh2 vulnerability, CVE-2026-58050, with PoC code. A malicious SSH server can corrupt a client's heap. Patch now.
A new CPython tarfile vulnerability (CVE-2026-11940) allows directory escape attacks. Learn how this extraction filter bypass exposes systems.
US authorities halted illegal World Cup streaming via nearly 400 domain seizures. Discover how Operation Offsides protects viewers from malware.
The U.S. offers a $10 million reward for UNC5792, a Russian FSB-linked group behind Signal and WhatsApp phishing of officials.