Latest News

Patched in April, the underlying vulnerability allows local attackers to elevate their privileges to root.

The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection. 

Several healthcare data breaches impacting hundreds of thousands and even millions were added to the HHS tracker.

Four vulnerabilities in OpenClaw can be chained together to steal credentials, escape the sandbox, and plant persistent backdoors.

The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data. 

The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.

At least one threat actor has adopted the recently released malware source code in attacks against NPM developers.

Grafana appears to have been targeted by Coinbase Cartel, a cybercrime group linked to ShinyHunters, Scattered Spider, and Lapsus$.

The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled.

Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.

Introduced in 2008, the critical-severity security defect was patched this week in NGINX Plus and NGINX open source.

Other noteworthy stories that might have slipped under the radar: Nvidia cloud gaming data breach, Android 17 security upgrades, FBI warning after ShinyHunters hacks Canvas.

Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions.

The non-bank lender discovered a ransomware attack nearly one year ago, but only recently completed its investigation.

Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories.