Eduard Kovacs

A researcher has disclosed the full details of the vulnerability and released a PoC without notifying Microsoft in advance.

Coralogix offers a full-stack observability platform that unifies logs, metrics, traces, security, and AI observability.

The attackers had access to a senior executive’s email account for 150 days and exfiltrated data for months.

Microsoft responds to backlash over its threats of legal action against researchers who publicly disclose zero-day vulnerabilities.

Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks.

Only approximately 50 companies have had access to Mythos until now and they have found thousands of vulnerabilities in their products.

The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers.

Dashlane’s security systems automatically locked accounts to protect them against the hacking attempts.

Novee researchers discovered an account takeover vulnerability in the open source CFP management tool Pretalx.

Catalin Dragomir previously pleaded guilty to selling access to an Oregon state government office’s network.

The attack was claimed by a hacktivist group, but evidence showed it used infrastructure linked to Iranian government threat actors.

The AI giant says the new plugin, which helps developers find vulnerabilities as they write code, has been used extensively internally.

Notable integrations include CrowdStrike, Palo Alto Networks, Microsoft, Okta, Zscaler, Netskope, Cloudflare, Fortinet, and Wiz.

Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.

The affected third-party vendor has not been named, but one possible candidate is TriZetto.

Many findings have been confirmed to be critical or high-severity vulnerabilities and the number will continue to increase. 

Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites.

Jacob Butler, 23, has been arrested in Canada and US authorities are seeking his extradition on computer hacking charges.

The FBI says First VPN has been used by dozens of ransomware groups for network reconnaissance and intrusions.

CVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One.