Latest News

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.

The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.

The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.

CISA has also published several advisories describing vulnerabilities in ICS and other OT products.

The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data.

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.

The security defects could be exploited for arbitrary code execution and denial-of-service.

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.

Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.

SAP released 28 new and two updated security notes, including four notes dealing with critical-severity bugs.

The Water Watch Center launched at DEF CON aims to help under-resourced utilities protect their systems against hackers.

Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue.

The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.

Marcus Hutchins doesn’t personally consider himself a hacker – but he accepts the epithet because it’s a widely used term for what he once did.