1920 items
Unread (2158) All Dismissed
HIGH
CVE-2026-7818 (CVSS 7) — Deserialization of untrusted data (CWE-502) in pgAdmin 4 FileBackedSessionManager. The session mana...
NVD CVE-2026-7818 26d ago
HIGH
MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems
The Hacker News supply-chainbreachesmalware +19 20d ago
INFO
'Dirty Frag' Exploit Poised to Blow Up on Enterprise Linux Distros
rss:darkreading 26d ago
INFO
It's Patch Tuesday for Microsoft & Not a Zero-Day In Sight
rss:darkreading 25d ago
INFO
Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE Flaws
The Hacker News 24d ago
INFO
[Webinar] How Modern Attack Paths Cross Code, Pipelines, and Cloud
The Hacker News 24d ago
INFO
Four OpenClaw Flaws Enable Data Theft, Privilege Escalation, and Persistence
The Hacker News 22d ago
INFO
Can Laws Stop Deepfakes? South Korea Aims to Find Out
rss:darkreading 20d ago
INFO
Processes and Culture Top Reasons Behind Data Breaches
rss:darkreading 17d ago
INFO
When Identity is the Attack Path
The Hacker News 16d ago
INFO
CISA Adds Exploited Langflow and Trend Micro Apex One Vulnerabilities to KEV
The Hacker News 16d ago
INFO
Meta settles school district lawsuit claiming addictive design harmed students' mental health
The Record 15d ago
INFO
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software
The Hacker News 14d ago
INFO
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos
The Hacker News 12d ago
INFO
CERT-In Mandates 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks
The Hacker News 11d ago
INFO
RevEng.AI Raises $15 Million to Hunt for Flaws and Backdoors in Software Binaries
SecurityWeek 10d ago
INFO
California Sues 23andMe, Alleging It Failed to Protect User Data in 2023 Breach
SecurityWeek 8d ago
INFO
California AG sues 23andMe over 2023 breach exposing health data
BleepingComputer 8d ago
INFO
Kirki, Burst Statistics WordPress Plugin Flaws in Attackers’ Crosshairs
SecurityWeek 3d ago
INFO
Chrome 149 Patches 429 Vulnerabilities
SecurityWeek 1d ago
INFO
EU unveils tech sovereignty package to cut reliance on US, Chinese suppliers
The Record 1d ago
INFO
Hackers Use AI for Exploit Development, Attack Automation
rss:darkreading breachesmalwarethreat-actors 26d ago
MEDIUM
CVE-2025-9973 (CVSS 6.4) — Due to not validating the organization context when executing adaptive authentication flows, the WSO...
NVD CVE-2025-9973 26d ago
HIGH
CVE-2025-10470 (CVSS 8.6) — The Magic Link authentication flow accepts multiple invalid authentication requests without adequate...
NVD CVE-2025-10470 26d ago
INFO
Cyber Espionage Group Targets Aviation Firms to Steal Map Data
rss:darkreading breachesmalwarethreat-actors 26d ago
MEDIUM
CVE-2025-8325 (CVSS 6.3) — The software fails to enforce role-based access controls for certain Gateway API invocations. Users ...
NVD CVE-2025-8325 26d ago
MEDIUM
CVE-2025-8154 (CVSS 5.3) — In Webhook API invocations, the component accepts user-supplied input for HTTP request headers witho...
NVD CVE-2025-8154 26d ago
CRITICAL
CVE-2026-42298 (CVSS 10) — Postiz is an AI social media scheduling tool. Prior to commit da44801, a "Pwn Request" vulnerability...
NVD CVE-2026-42298 29d ago
HIGH
CVE-2026-44400 (CVSS 8.1) — MailEnable Enterprise Premium 10.55 and earlier contains an improper authorization vulnerability in ...
NVD CVE-2026-44400 29d ago
HIGH
CVE-2026-7807 (CVSS 8.1) — SmarterTools SmarterMail builds prior to 9560 contain a local file inclusion vulnerability in the /a...
NVD CVE-2026-7807 29d ago
INFO
Hackers Leak DentaQuest Information Impacting 2.6 Million
SecurityWeek breachesransomwaresupply-chain +11 1d ago
INFO
Instructure Breach Exposes Schools' Vendor Dependence
rss:darkreading 31d ago
INFO
ShinyHunters Claims Second Attack Against Instructure
rss:darkreading 29d ago
INFO
Instructure Reaches Ransom Agreement with ShinyHunters to Stop 3.65TB Canvas Leak
The Hacker News 26d ago
INFO
Congress Puts Heat on Instructure After Canvas Outage
rss:darkreading 22d ago
INFO
7-Eleven confirms breach after ShinyHunters claims
The Record 17d ago
INFO
7-Eleven data breach exposes personal information of 185,000 people
BleepingComputer 12d ago
INFO
185,000 Likely Impacted by 7-Eleven Data Breach
SecurityWeek 11d ago
INFO
Charter confirms data breach after ShinyHunters extortion threat
BleepingComputer 11d ago
INFO
Carnival Cruise confirms data breach affecting nearly 6 million people
BleepingComputer 9d ago
INFO
Charter Communications data breach affects 4.9 million accounts
BleepingComputer 9d ago
INFO
Charter Communications Data Breach Could Impact Nearly 5 Million
SecurityWeek 8d ago
CRITICAL
CVE-2026-41889 (CVSS 9.8) — pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when ...
NVD CVE-2026-41889 29d ago
HIGH
CVE-2026-43967 (CVSS 0) — Inefficient Algorithmic Complexity vulnerability in absinthe-graphql absinthe allows unauthenticated...
NVD CVE-2026-43967 29d ago
HIGH
CVE-2026-42793 (CVSS 0) — Allocation of Resources Without Limits or Throttling vulnerability in absinthe-graphql absinthe allo...
NVD CVE-2026-42793 29d ago
HIGH
CVE-2026-43460 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: spi: rockchip-sfc: Fix double-f...
NVD CVE-2026-43460 29d ago
HIGH
CVE-2026-43458 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: serial: caif: hold tty->link re...
NVD CVE-2026-43458 29d ago
HIGH
CVE-2026-43453 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_set_pipapo: fix ...
NVD CVE-2026-43453 29d ago
HIGH
CVE-2026-43450 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: netfilter: nfnetlink_cthelper: ...
NVD CVE-2026-43450 29d ago
HIGH
CVE-2026-43449 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: nvme-pci: Fix slab-out-of-bound...
NVD CVE-2026-43449 29d ago
HIGH
CVE-2026-43440 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: net/mana: Null service_wq on se...
NVD CVE-2026-43440 29d ago
HIGH
CVE-2026-43427 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: usb: class: cdc-wdm: fix reorde...
NVD CVE-2026-43427 29d ago
HIGH
CVE-2026-43426 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: usb: renesas_usbhs: fix use-aft...
NVD CVE-2026-43426 29d ago
HIGH
CVE-2026-43388 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: clear walk_contr...
NVD CVE-2026-43388 29d ago
HIGH
CVE-2026-43386 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix potenti...
NVD CVE-2026-43386 29d ago
HIGH
CVE-2026-43380 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/q54sj108a2) fix s...
NVD CVE-2026-43380 29d ago
HIGH
CVE-2026-43378 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: smb: server: fix use-after-free...
NVD CVE-2026-43378 29d ago
HIGH
CVE-2026-43328 (CVSS 7.8) — In the Linux kernel, the following vulnerability has been resolved: cpufreq: governor: fix double f...
NVD CVE-2026-43328 29d ago
HIGH
CVE-2026-41900 (CVSS 8.8) — OpenLearnX is an open-source, decentralized learning and assessment platform. Prior to version 2.0.3...
NVD CVE-2026-41900 30d ago
MEDIUM
CVE-2026-8112 (CVSS 6.3) — A vulnerability was found in 8421bit MiniClaw up to 223c16a1088e138838dcbd18cd65a37c35ac5a84. Affect...
NVD CVE-2026-8112 30d ago
MEDIUM
CVE-2026-41691 (CVSS 6.5) — Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that a...
NVD CVE-2026-41691 30d ago
HIGH
Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
The Hacker News supply-chainbreachesmalware +3 25d ago
INFO
After Replacing TeamPCP Malware, 'PCPJack' Steals Cloud Secrets
rss:darkreading 30d ago
INFO
GitHub Confirms Hack Impacting 3,800 Internal Repositories
SecurityWeek 17d ago
INFO
The Hackers Behind Shai-Hulud: Lucky or Skilled?
rss:darkreading 11d ago
INFO
Has CISA Finally Found Its New Leader in Tom Parker?
rss:darkreading breachesmalwarethreat-actors 30d ago
INFO
'TrustFall' Convention Exposes Claude Code Execution Risk
rss:darkreading breachesmalwarethreat-actors 30d ago
INFO
AI-Driven Cyberattack on Mexico Couldn't Breach OT Systems
rss:darkreading breachesmalwarethreat-actors 30d ago
HIGH
CVE-2026-42010 (CVSS 7.1) — A flaw was found in gnutls. Servers configured with RSA-PSK (Rivest–Shamir–Adleman – Pre-Shared Key)...
NVD CVE-2026-42010 30d ago
INFO
AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs
The Hacker News supply-chainbreachesmalware +19 1d ago
INFO
VoidStealer Malware Darts Past Google Chrome's Encryption
rss:darkreading 31d ago
INFO
Android Adds Intrusion Logging for Sophisticated Spyware Forensics
The Hacker News 25d ago
INFO
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
rss:googleprojectzero 25d ago
INFO
Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI
SecurityWeek 16d ago
INFO
Google accidentally exposed details of unfixed Chromium flaw
BleepingComputer 16d ago
INFO
Google API Keys Remain Active After Deletion
rss:darkreading 16d ago
INFO
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
The Hacker News 10d ago
INFO
Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks
SecurityWeek 9d ago
INFO
US charges Google security engineer with Polymarket insider trading
BleepingComputer 8d ago
INFO
Google Chrome adds session cookie theft protection for all users
BleepingComputer 8d ago
INFO
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
The Hacker News 6d ago
INFO
Google fixes one actively exploited Android zero-day, 124 flaws
BleepingComputer 4d ago
INFO
Google adds Android protection against AI deepfake scam calls
BleepingComputer 4d ago
INFO
Malicious Notifications Could Trick Google Gemini Users
rss:darkreading 3d ago
INFO
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
The Hacker News 3d ago
INFO
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
The Hacker News 3d ago
INFO
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
The Hacker News 2d ago
INFO
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
The Hacker News 2d ago
INFO
Gemini Voice Assistant Hijacked via Messaging Notifications
SecurityWeek 2d ago
HIGH
CVE-2026-43281 (CVSS 7.1) — In the Linux kernel, the following vulnerability has been resolved: mailbox: Prevent out-of-bounds ...
NVD CVE-2026-43281 31d ago
INFO
From Stuxnet to ChatGPT: 20 News Events That Shaped Cyber
rss:darkreading breachesmalwarethreat-actors 31d ago
INFO
Attacks Abuse Windows Phone Link to Steal Texts & Bypass 2FA
rss:darkreading breachesmalwarethreat-actors 31d ago
INFO
China-Linked TA4922 Expands Phishing Attacks to UK, Germany, Italy, and South Africa
The Hacker News supply-chainbreachesmalware +10 2d ago
INFO
Middle East Cyber Battle Field Broadens — Especially in UAE
rss:darkreading 32d ago
INFO
Cyber Resilience is the New Business Continuity Plan
SecurityWeek 18d ago
INFO
Windows Zero-Day Barrage Continues After Patch Tuesday
rss:darkreading 18d ago
INFO
Identity Alone Isn't Enough: Why Device Security Has to Share the Load
BleepingComputer 17d ago
INFO
Anthropic: Mythos Detected 23,000 Potential Vulnerabilities Across 1,000 OSS Projects
SecurityWeek 12d ago
INFO
Iranian APT Targets Aviation, Software Companies With Updated Tools
SecurityWeek 11d ago
INFO
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
The Hacker News 11d ago
INFO
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
The Hacker News 9d ago
INFO
Global Stock Exchange Hit by Monthslong Email Campaign
rss:darkreading 3d ago
INFO
What 345 Days of Untested Exposure Looks Like at a Bank
BleepingComputer 3d ago
MEDIUM
CVE-2026-7573 (CVSS 5) — An authorization bypass (CWE-639) in the GetUserRoles gRPC API endpoint in Velocidex Velociraptor be...
NVD CVE-2026-7573 32d ago
INFO
Trellix Source Code Breach Highlights Growing Supply Chain Threats
rss:darkreading breachesmalwarethreat-actors 32d ago
HIGH
CVE-2026-43059 (CVSS 0) — In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: Fix list corru...
NVD CVE-2026-43059 32d ago
MEDIUM
CVE-2026-34002 (CVSS 6.1) — A flaw was found in the X.Org X server. This vulnerability, an out-of-bounds read, affects the XKB (...
NVD CVE-2026-34002 32d ago
MEDIUM
CVE-2026-34000 (CVSS 6.1) — A flaw was found in the X.Org X server. This out-of-bounds read vulnerability in the XKB geometry pr...
NVD CVE-2026-34000 32d ago
HIGH
CVE-2026-43616 (CVSS 7.1) — Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write ...
NVD CVE-2026-43616 33d ago
CRITICAL
CVE-2026-42796 (CVSS 9.8) — Arelle before 2.39.10 contains an unauthenticated remote code execution vulnerability in the /rest/c...
NVD CVE-2026-42796 33d ago
HIGH
CVE-2026-37540 (CVSS 8.4) — OpenAMP v2025.10.0 ELF loader contains an integer overflow vulnerability in firmware image parsing. ...
NVD CVE-2026-37540 36d ago
TL;DR AI
Here is a 3-sentence summary for a technical security audience: Chaotic Eclipse has released a proof-of-concept (PoC) for a Windows privilege escalation zero-day vulnerability, MiniPlasma, which grants attackers SYSTEM privileges on fully patched Windows systems, including Windows 11. The vulnerability, codenamed "cldflt.sys," impacts the Windows Cloud Files Mini Filter Driver and is still present despite Microsoft's initial patch in December 2020. The vulnerability was discovered by Chaotic Eclipse researcher James Forshaw, who found it in Google Project Zero's September 2020 report, and was initially thought to be fixed, but further investigation has confirmed that it remains unpatched.
supply-chainbreachesmalwarezero-day
Read full story ↗