2138 items
Unread (2128) All Dismissed
HIGH
CVE-2026-49120 (CVSS 8.5) — Medplum before 5.1.14 contains a server-side request forgery vulnerability in the subscription worke...
NVD CVE-2026-49120 3d ago
HIGH
CVE-2026-47265 (CVSS 7.5) — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.1...
NVD CVE-2026-47265 3d ago
HIGH
CVE-2026-41577 (CVSS 7.5) — authentik is an open-source identity provider. Prior to versions 2025.12.5 and 2026.2.3, the SAML so...
NVD CVE-2026-41577 3d ago
MEDIUM
CVE-2026-34993 (CVSS 6.4) — AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.1...
NVD CVE-2026-34993 3d ago
HIGH
CVE-2026-28299 (CVSS 8.2) — SolarWinds Web Help Desk is found to be affected by a denial-of-service vulnerability, which when ex...
NVD CVE-2026-28299 3d ago
HIGH
CVE-2026-1829 (CVSS 8.8) — The Content Visibility for Divi Builder plugin for WordPress is vulnerable to Remote Code Execution ...
NVD CVE-2026-1829 3d ago
HIGH
CVE-2026-10617 (CVSS 7.3) — A security vulnerability has been detected in nextlevelbuilder GoClaw up to 3.11.3. This affects the...
NVD CVE-2026-10617 3d ago
INFO
DriveSurge Hijacks Thousands of Sites for ClickFix, FakeUpdate Attacks
rss:darkreading breachesmalwarethreat-actors 3d ago
INFO
Trump Signs Executive Order That Invites Vetting of Top AI Models for National Security Risks
SecurityWeek breachesransomwaresupply-chain 3d ago
INFO
AI-built ransomware toolkit automates EDR evasion, AD discovery
BleepingComputer breachesransomwaresupply-chain 3d ago
INFO
China Uses Dual-Method Cyberattack on Czech Orgs
rss:darkreading breachesmalwarethreat-actors 3d ago
INFO
Securing AI Agents Before They Go Rogue Is Next to Impossible
rss:darkreading breachesmalwarethreat-actors 3d ago
CRITICAL
CVE-2025-48595: Android Framework Integer Overflow Vulnerability (Android Framework)
CISA KEV CVE-2025-48595actively-exploited +2 4d ago
INFO
Android Update Patches Exploited Zero-Day, 123 Other Vulnerabilities
SecurityWeek 3d ago
INFO
Google June 2026 Android Update Patches 124 Flaws, One Actively Exploited
The Hacker News 3d ago
INFO
White House unveils pared-back AI executive order
The Record breachesransomwarenation-state 3d ago
INFO
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine
The Hacker News CVE-2025-8088supply-chainbreaches 3d ago
CRITICAL
CVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerability (Oracle WebLogic Server)
CISA KEV CVE-2024-21182actively-exploited +2 5d ago
INFO
Oracle WebLogic Vulnerability Exploited in the Wild
SecurityWeek 3d ago
INFO
Oracle WebLogic CVE-2024-21182 Added to KEV Catalog After Active Exploitation
The Hacker News 3d ago
CRITICAL
CVE-2026-42074 (CVSS 9.8) — OpenClaude is an open-source coding-agent command line interface for cloud and local model providers...
NVD CVE-2026-42074 3d ago
CRITICAL
CVE-2026-0611 (CVSS 9.8) — Spacelabs Healthcare Sentinel versions 10.5.x and higher and 11.x.x before 11.6.0 contain an unauthe...
NVD CVE-2026-0611 3d ago
HIGH
Microsoft shares mitigation for YellowKey Windows zero-day
BleepingComputer breachesransomwaresupply-chain +47 16d ago
INFO
Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation
The Hacker News 23d ago
INFO
Microsoft's MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday
The Hacker News 23d ago
HIGH
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege Escalation
The Hacker News 22d ago
INFO
Zero-Day Exploit Against Windows BitLocker
rss:schneier 18d ago
INFO
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer
The Hacker News 17d ago
INFO
The New Phishing Click: How OAuth Consent Bypasses MFA
The Hacker News 17d ago
INFO
Legacy Windows Tool MSHTA Fuels Surge in Silent Malware Attacks
SecurityWeek 17d ago
HIGH
Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’
SecurityWeek 17d ago
INFO
Stealer Spoofs Google, Microsoft & Apple, Then Backdoors macOS
rss:darkreading 17d ago
HIGH
Cybercrime service disrupted for abusing Microsoft platform to sign malware
BleepingComputer 17d ago
INFO
Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API
The Hacker News 16d ago
INFO
Microsoft Takes Down Malware-Signing Service Behind Ransomware Attacks
The Hacker News 16d ago
INFO
Microsoft Rolls Out Mitigations for ‘YellowKey’ BitLocker Bypass
SecurityWeek 16d ago
INFO
Microsoft Open-Sources RAMPART and Clarity to Secure AI Agents During Development
The Hacker News 16d ago
INFO
Microsoft warns of new Defender zero-days exploited in attacks
BleepingComputer 15d ago
INFO
Microsoft Patches Exploited UnDefend and RedSun Defender Zero-Days
SecurityWeek 15d ago
INFO
China's Webworm Uses Discord, Microsoft Graphs to Hack EU Govts.
rss:darkreading 14d ago
INFO
FBI warns of Kali365 phishing-as-a-service after April Microsoft 365 attacks
The Record 14d ago
INFO
FBI warns of Kali365 phishing service targeting Microsoft 365 accounts
BleepingComputer 11d ago
INFO
Microsoft: Domain Controller lookup may fail on Windows Server 2016
BleepingComputer 10d ago
INFO
Anthropic Expands Claude’s Enterprise Security Governance With 28 New Integrations
SecurityWeek 10d ago
INFO
Microsoft Defender can now automatically isolate hacked endpoints
BleepingComputer 10d ago
INFO
Microsoft Issues Out-of-Band SharePoint Patch
rss:darkreading 10d ago
INFO
AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites
The Hacker News 9d ago
INFO
Windows 11 KB5089573 update released with performance improvements
BleepingComputer 9d ago
INFO
Microsoft fixes KB5089549 Windows security update install issues
BleepingComputer 4d ago
INFO
Microsoft confirms outage affecting MFA, My Sign-Ins platform
BleepingComputer 4d ago
INFO
Microsoft fixes outage affecting MFA setup, MySignIn service
BleepingComputer 4d ago
INFO
Microsoft says it will not pursue security researchers after zero-day backlash
The Record 4d ago
INFO
Microsoft investigates Office Apps, Teams file access issues
BleepingComputer 4d ago
INFO
Microsoft's Zero-Day Legal Threats Spark Backlash
rss:darkreading 4d ago
INFO
Microsoft Threatening Security Researcher
rss:schneier 3d ago
INFO
Exclusive: How One Line of Code Put Billions of Microsoft Android App Downloads at Risk
SecurityWeek 3d ago
INFO
Microsoft Exchange Online outage causes email delays, failures
BleepingComputer 3d ago
INFO
FBI-Flagged Phishing Kit Kali365 Expands Its Reach
rss:darkreading 3d ago
INFO
Microsoft's Coreutils project brings Linux commands to Windows
BleepingComputer 3d ago
INFO
New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare
The Hacker News 2d ago
INFO
Microsoft Tries to Calm Legal Threat Fears After Zero-Day Disclosure Backlash
SecurityWeek 2d ago
INFO
One-Click GitHub Dev Attack Lets Attackers Steal Full GitHub OAuth Tokens
The Hacker News 2d ago
INFO
Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag
The Hacker News 2d ago
INFO
Coding Gaffe Exposes Microsoft 365 Accounts to Widespread Takeover
rss:darkreading 2d ago
INFO
VS Code Vulnerability Allows One-Click GitHub Token Theft
SecurityWeek 1d ago
INFO
Researcher publishes GitHub token-stealing exploit, blames Microsoft’s disclosure process
The Record 1d ago
INFO
Microsoft blames unexpected Windows driver updates on caching issue
BleepingComputer 1d ago
INFO
PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network
The Hacker News 23h ago
INFO
New Threat Cluster OP-512 Targets Microsoft IIS Servers with Custom Web Shell Framework
The Hacker News 16h ago
INFO
Chinese APT deploys new malware to keep access to hacked networks
BleepingComputer 10h ago
INFO
Two New Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis
SecurityWeek breachesransomwaresupply-chain 3d ago
CRITICAL
CVE-2026-47117 (CVSS 9.8) — OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model ...
NVD CVE-2026-47117 3d ago
MEDIUM
CVE-2026-45680 (CVSS 5.9) — OpenTelemetry eBPF Instrumentation provides eBPF instrumentation based on the OpenTelemetry standard...
NVD CVE-2026-45680 3d ago
HIGH
CVE-2026-30652 (CVSS 8.8) — A remote buffer overflow vulnerability exists in the /cgi-bin/dido/setdo.cgi endpoint of the admin i...
NVD CVE-2026-30652 3d ago
INFO
Russia claims foreign spy agencies hacked officials' phones
The Record breachesransomwarenation-state 3d ago
INFO
Hacking Meta’s AI Chatbot
rss:schneier analysispolicy +4 1d ago
INFO
Tech giants promise British regulator they will tweak platforms to protect kids online
The Record 15d ago
INFO
Hackers Used Meta’s AI Support Bot to Seize Instagram Accounts
Krebs 4d ago
INFO
Meta AI Hands Over High-Profile Instagram Accounts to Hackers
SecurityWeek 3d ago
INFO
Instagram users locked out after Meta AI abused to steal accounts
BleepingComputer 3d ago
INFO
Why the browser is now the front line for AI security
BleepingComputer breachesransomwaresupply-chain 3d ago
CRITICAL
CVE-2026-7312 (CVSS 10) — CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from 14...
NVD CVE-2026-7312 3d ago
HIGH
CVE-2026-7195 (CVSS 8.8) — CWE-20: Improper Input Validation in web services in Progress Sitefinity 14.1.x through 14.3.x, 14.4...
NVD CVE-2026-7195 3d ago
INFO
Anthropic Expanding Mythos Access to 150 New Organizations
SecurityWeek breachesransomwaresupply-chain 3d ago
HIGH
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
The Hacker News supply-chainbreachesmalware +81 17d ago
INFO
ABB AC500 V3 Stack Buffer Overflow in Cryptographic Message Syntax
rss:cisa-advisories 24d ago
INFO
Fuji Electric Tellus
rss:cisa-advisories 24d ago
INFO
ABB AC500 V3 Multiple Vulnerabilities
rss:cisa-advisories 24d ago
INFO
Subnet Solutions PowerSYSTEM Center
rss:cisa-advisories 24d ago
INFO
ABB Automation Builder Gateway for Windows
rss:cisa-advisories 24d ago
INFO
ABB WebPro SNMP Card PowerValue Multiple Vulnerabilities
rss:cisa-advisories 24d ago
INFO
Siemens Siemens ROS#
rss:cisa-advisories 22d ago
INFO
Siemens gWAP
rss:cisa-advisories 22d ago
INFO
Siemens SIMATIC
rss:cisa-advisories 22d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 22d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 22d ago
INFO
Siemens Simcenter Femap
rss:cisa-advisories 22d ago
INFO
Universal Robots Polyscope 5
rss:cisa-advisories 22d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 22d ago
INFO
Siemens Teamcenter
rss:cisa-advisories 22d ago
INFO
Siemens Solid Edge
rss:cisa-advisories 22d ago
INFO
Siemens SENTRON 7KT PAC1261 Data Manager
rss:cisa-advisories 22d ago
INFO
Siemens Opcenter RDnL
rss:cisa-advisories 22d ago
INFO
Siemens Ruggedcom Rox
rss:cisa-advisories 22d ago
INFO
Siemens Industrial Devices
rss:cisa-advisories 22d ago
INFO
Siemens SIMATIC S7 PLC Web Server
rss:cisa-advisories 22d ago
INFO
Siemens SIPROTEC 5
rss:cisa-advisories 22d ago
INFO
Siemens SIMATIC
rss:cisa-advisories 22d ago
INFO
Grafana GitHub Token Breach Led to Codebase Download and Extortion Attempt
The Hacker News 19d ago
INFO
Kieback & Peter DDC Building Controllers
rss:cisa-advisories 17d ago
INFO
Siemens RUGGEDCOM APE1808 Devices
rss:cisa-advisories 17d ago
INFO
ABB CoreSense HM and CoreSense M10
rss:cisa-advisories 17d ago
INFO
ScadaBR
rss:cisa-advisories 17d ago
INFO
ZKTeco CCTV Cameras
rss:cisa-advisories 17d ago
INFO
CISA Exposes Secrets, Credentials in 'Private' Repo
rss:darkreading 17d ago
INFO
GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories
The Hacker News 17d ago
INFO
GitHub investigates internal repositories breach claimed by TeamPCP
BleepingComputer 16d ago
INFO
GitHub confirms breach of 3,800 repos via malicious VSCode extension
BleepingComputer 16d ago
INFO
Schnieider Electric EcoStruxure Machine Expert HVAC (SEVD-2026-132-01)
rss:cisa-advisories 16d ago
INFO
Senator presses CISA for answers about alleged GitHub repository leak
The Record 16d ago
INFO
GitHub confirms being hacked by TeamPCP, says customer data unaffected
The Record 16d ago
INFO
Grafana breach caused by missed token rotation after TanStack attack
BleepingComputer 16d ago
INFO
GitHub Confirms Breach, 4K Internal Repos Stolen
rss:darkreading 16d ago
INFO
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension
The Hacker News 16d ago
INFO
GitHub links repo breach to TanStack npm supply-chain attack
BleepingComputer 15d ago
INFO
ABB Terra AC Wallbox
rss:cisa-advisories 15d ago
INFO
ABB B&R Automation Studio
rss:cisa-advisories 15d ago
INFO
ABB B&R Automation Runtime
rss:cisa-advisories 15d ago
INFO
ABB B&R PCs
rss:cisa-advisories 15d ago
INFO
Grafana Says Codebase and Other Data Stolen via TanStack Supply Chain Attack
SecurityWeek 14d ago
INFO
Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows
The Hacker News 14d ago
INFO
CISA Security Leak
rss:schneier 14d ago
INFO
Lawmakers Demand Answers as CISA Tries to Contain Data Leak
Krebs 14d ago
INFO
Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware
The Hacker News 13d ago
INFO
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
The Hacker News 13d ago
INFO
Laravel Lang packages hijacked to deploy credential-stealing malware
BleepingComputer 13d ago
INFO
Over 5,500 GitHub Repositories Infected in ‘Megalodon’ Supply Chain Attack
SecurityWeek 11d ago
INFO
ABB Terra AC
rss:cisa-advisories 10d ago
INFO
ABB LVS MConfig
rss:cisa-advisories 10d ago
INFO
ABB Ability Camera Connect
rss:cisa-advisories 10d ago
INFO
Eppendorf BioFlo 320
rss:cisa-advisories 10d ago
INFO
ABB AbilityTM Zenon Remote Transport Vulnerability
rss:cisa-advisories 10d ago
INFO
ABB AC500 V2
rss:cisa-advisories 10d ago
INFO
ABB B&R Automation Runtime DoS Vulnerability in System Diagnostics Manager (SDM)
rss:cisa-advisories 10d ago
INFO
Feeding Frenzy: 'Megalodon' Malware Infects Thousands of GitHub Repos
rss:darkreading 10d ago
INFO
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
The Hacker News 9d ago
INFO
ABB EIBPORT
rss:cisa-advisories 8d ago
INFO
Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter
rss:cisa-advisories 8d ago
INFO
ABB Busch-Welcome 2 Wire Door Opener Actuator
rss:cisa-advisories 8d ago
INFO
Fourth Frontier Frontier X Mobile Application, Frontier X2
rss:cisa-advisories 8d ago
INFO
CP Plus 8 Ch. Network Video Recorder
rss:cisa-advisories 8d ago
INFO
XCharge C6
rss:cisa-advisories 8d ago
INFO
KMW CCTV Security Cameras
rss:cisa-advisories 8d ago
INFO
MacGregor Voyage Data Recorder (VDR) G4e
rss:cisa-advisories 8d ago
INFO
Supply Chain Compromises Impact Nx Console and GitHub Repositories
rss:cisa-advisories 8d ago
INFO
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
The Hacker News 8d ago
INFO
Microsoft calls zero-day releases ‘never justifiable’ as researcher threatens to drop more
The Record 7d ago
INFO
OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack
The Hacker News 4d ago
INFO
Red Hat removes tainted packages after software pipeline compromise
The Record 3d ago
INFO
VS Code zero-day lets hackers steal GitHub tokens in one click
BleepingComputer 2d ago
INFO
NAVTOR NavBox
rss:cisa-advisories 1d ago
INFO
Hitachi Energy MACH HiDraw
rss:cisa-advisories 1d ago
INFO
Hitachi Energy ITT600 Explorer
rss:cisa-advisories 1d ago
INFO
B&R PPT30 Operating System
rss:cisa-advisories 1d ago
INFO
Hitachi Energy RTU500
rss:cisa-advisories 1d ago
INFO
Claude Code GitHub Action Flaw Let One Malicious Issue Hijack Repositories
The Hacker News 1d ago
INFO
CISA flags two-year-old Oracle flaw as actively exploited in attacks
BleepingComputer breachesransomwaresupply-chain 3d ago
INFO
The Zero-Knowledge Threat Actor and the End of Responsible Disclosure
SecurityWeek breachesransomwaresupply-chain 3d ago
INFO
Critical Vulnerability in HP VoIP Phones Enables Enterprise Network Breaches
SecurityWeek breachesransomwaresupply-chain 3d ago
INFO
Beyond Assume-Breach: How AI-Native Security Will Reshape Enterprise Defense
rss:darkreading breachesmalwarethreat-actors 3d ago
INFO
CISA and Partners Urge Hardening Automatic Tank Gauge Systems
rss:cisa-advisories actively-exploitedadvisories 3d ago
INFO
CISA Adds One Known Exploited Vulnerability to Catalog
rss:cisa-advisories actively-exploitedadvisories +3 16h ago
INFO
CISA Adds One Known Exploited Vulnerability to Catalog
rss:cisa-advisories 4d ago
INFO
CISA Adds Two Known Exploited Vulnerabilities to Catalog
rss:cisa-advisories 3d ago
INFO
CISA Adds One Known Exploited Vulnerability to Catalog
rss:cisa-advisories 2d ago
INFO
AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It.
The Hacker News supply-chainbreachesmalware 3d ago
INFO
Gemini Voice Assistant Hijacked via Messaging Notifications
SecurityWeek breachesransomwaresupply-chain +18 1d ago
INFO
VoidStealer Malware Darts Past Google Chrome's Encryption
rss:darkreading 30d ago
INFO
Android Adds Intrusion Logging for Sophisticated Spyware Forensics
The Hacker News 23d ago
INFO
A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window Opens
rss:googleprojectzero 23d ago
INFO
Google’s Surge in Chrome Vulnerability Discoveries Likely Driven by AI
SecurityWeek 15d ago
INFO
Google accidentally exposed details of unfixed Chromium flaw
BleepingComputer 15d ago
INFO
Google API Keys Remain Active After Deletion
rss:darkreading 15d ago
INFO
GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure
The Hacker News 9d ago
INFO
Google Unveils AI Threat Defense Platform to Fight AI-Powered Cyberattacks
SecurityWeek 8d ago
INFO
US charges Google security engineer with Polymarket insider trading
BleepingComputer 7d ago
INFO
Google Chrome adds session cookie theft protection for all users
BleepingComputer 7d ago
INFO
Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts
The Hacker News 4d ago
INFO
Google fixes one actively exploited Android zero-day, 124 flaws
BleepingComputer 3d ago
INFO
Google adds Android protection against AI deepfake scam calls
BleepingComputer 2d ago
INFO
Malicious Notifications Could Trick Google Gemini Users
rss:darkreading 2d ago
INFO
Google DoubleClick Abused in New Malspam Campaign to Deliver DesckVB RAT
The Hacker News 2d ago
INFO
WhatsApp, Slack Notifications Could Hijack Google Gemini on Android
The Hacker News 2d ago
INFO
Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS
The Hacker News 1d ago
INFO
FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
The Hacker News 1d ago
INFO
The Intersection of Encryption and AI
rss:schneier analysispolicy 3d ago
INFO
How Leading Organizations Are Turning EDR Into Operational Resilience
The Hacker News supply-chainbreachesmalware 3d ago
HIGH
CVE-2026-5422 (CVSS 8.1) — A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root dire...
NVD CVE-2026-5422 3d ago
INFO
Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor
rss:unit42 threat-actorsmalwarenation-state 3d ago
HIGH
Grafana GitHub Breach Exposes Source Code via TanStack npm Attack
The Hacker News supply-chainbreachesmalware +16 16d ago
INFO
The npm Threat Landscape: Attack Surface and Mitigations (Updated May 1)
rss:unit42 35d ago
INFO
Worm Redux: Fresh Mini Shai-Hulud Infections Bite Supply Chain
rss:darkreading 24d ago
HIGH
Stealer Backdoor Found in 3 Node-IPC Versions Targeting Developer Secrets
The Hacker News 22d ago
HIGH
Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware
The Hacker News 18d ago
HIGH
Developer Workstations Are Now Part of the Software Supply Chain
The Hacker News 18d ago
HIGH
⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More
The Hacker News 18d ago
HIGH
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account
The Hacker News 17d ago
INFO
Over 320 NPM Packages Hit by Fresh Mini Shai-Hulud Supply Chain Attack
SecurityWeek 16d ago
INFO
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
The Hacker News 11d ago
INFO
Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets
The Hacker News 7d ago
INFO
Miasma Supply Chain Attack Compromises Red Hat npm Packages with Credential-Stealing Worm
The Hacker News 4d ago
INFO
Red Hat npm packages compromised to steal developer credentials
BleepingComputer 4d ago
INFO
Supply Chain Attack Hits 32 Red Hat NPM Packages
SecurityWeek 3d ago
INFO
New IronWorm malware hits 36 packages in npm supply-chain attack
BleepingComputer 1d ago
INFO
Rust-Written IronWorm Hits NPM Supply Chain
rss:darkreading 1d ago
INFO
IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks
The Hacker News 10h ago
INFO
Pakistan-Linked SideCopy Targets Afghanistan Finance Ministry with Xeno RAT
The Hacker News supply-chainbreachesmalware 3d ago
INFO
Dashlane Brute-Force Attack Leads to Limited Encrypted Vault Downloads
SecurityWeek breachesransomwaresupply-chain +1 3d ago
INFO
Dashlane Discloses Brute-Force Attack, Encrypted Vaults of Fewer Than 20 Users Downloaded
The Hacker News 4d ago
TL;DR
Android Framework contains an integer overflow vulnerability that allows for code execution that could allow for local privilege escalation. Due: 2026-06-05. Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
CVE-2025-48595actively-exploited
Read full story ↗