Latest News

Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges.

The group is using zero-days, quickly weaponizes fresh bugs, and exfiltrates and encrypts data within days of initial access.

Shchukin is accused of extorting more than $2 million as the head of the GandCrab and REvil ransomware operations.

The Trump administration says the FY2027 budget refocuses CISA on its core mission: protecting federal agencies and critical infrastructure.

The high-end casino and hotel operator has likely paid a ransom to avoid a data leak.

A vulnerability named ‘AI Agent Traps’ allows attackers to manipulate, deceive, and exploit visiting agents via malicious web content.

Hackers published 36 NPM packages posing as Strapi plugins to execute shells, escape containers, and harvest credentials.

The threat actor behind the Axios supply chain attack has been aiming at other maintainers in its social engineering campaign.

The improper access control bug in FortiClient EMS allows unauthenticated attackers to execute arbitrary code remotely.

Hackers stole over 300GB of data from the Commission’s AWS environment, including personal information.

A Chinese threat actor exploited the video conferencing platform to perform reconnaissance, escalate privileges, and execute additional payloads.

Other noteworthy stories that might have slipped under the radar: Symantec vulnerability, anti-ClickFix mechanism added to macOS, FBI hack classified as major incident.

The vulnerabilities can be chained together to bypass authentication and upload arbitrary files to the server.

Shadow AI embedded in everyday apps, combined with outdated mobile devices and zero-click exploits, is creating a new and largely unseen mobile risk.

Using automated scanning and the Nexus Listener collection framework, the hackers compromised over 750 systems.