Ionut Arghire

Fixes were rolled out for over two dozen vulnerabilities, including critical- and high-severity bugs.

The startup’s platform leverages AI to automate forensic investigations, accelerating incident response.

The hackers trick victims into accessing GitHub or GitLab repositories that are opened using Visual Studio Code.

Impacting Anthropic’s official MCP server, the vulnerabilities can be exploited through prompt injections.

Oracle’s January 2026 CPU resolves roughly 230 unique vulnerabilities across more than 30 products.

The two bugs, an arbitrary file read and an SSRF bug, can be exploited without user interaction to leak credentials, databases, and other data.

Providing cyberespionage and remote code execution capabilities, the malware is executed via DLL sideloading.

A simple payload allowed attackers to create a new event leaking summaries of the victim’s private meetings.

Operating as an access broker, the defendant sold unauthorized access to compromised networks to an undercover agent.

The information stealer abuses legitimate APIs and libraries to exfiltrate data to Discord webhooks.

Posing as an ad blocker, the malicious extension crashes the browser to lure victims into installing malware.

The compromised personal information includes names, dates of birth, Social Security numbers, and employment-related data.

The company will use the investment to accelerate the adoption of its solution among financial institutions and digital businesses.

The startup is building the necessary infrastructure and tools to help organizations transition to post-quantum computing.

The incident impacted the personal information of CIRO member firms and their registered employees.

The critical issue impacts Bluetooth audio accessories with improper Google Fast Pair implementations.

UAT-9686 exploited the bug to deploy the AquaShell backdoor on Cisco appliances with certain ports open to the internet.

The startup will use the investment to accelerate R&D, expand go-to-market efforts, and hire new talent.

The attack bypassed Copilot’s data leak protections and allowed for session exfiltration even after the Copilot chat was closed.

Hackers stole patients’ personal, treatment, and health insurance information from the organization’s IT systems.