7-Zip RCE Bug Highlights the Hidden Cost of Manual App Updates

The latest 7-Zip vulnerability affects how the application handles XZ-compressed data. A specially crafted archive…

Jul 21

4 min read

All Stories

AI Token Theft and MFA Bypass: Lessons From Infostealer Logs

Sep 11

6 min read

SAP Kernel and Message Server Bugs Threaten Core Business Systems

Sep 11

5 min read

DeepSeek Harness CVE-2026-82533 Let AI Agents Disable Their Own Sandbox

Sep 11

7 min read

BlueMoon Exploit Kit Targets Chrome and Windows Endpoints

Sep 11

6 min read

LiteLLM Exposed Admin Key: What Wiz Research Found

Sep 11

9 min read

More Stories

Microsoft June 2026 Patch Tuesday Breaks Records with Around 200 Vulnerability Fixes

The Microsoft June 2026 Patch Tuesday release has become Microsoft’s largest Patch Tuesday update to…

Jun 11

5 min read

Latest Stories

SAP Kernel and Message Server Bugs Threaten Core Business Systems

Sep 11

5 min read

BlueMoon Exploit Kit Targets Chrome and Windows Endpoints

Sep 11

6 min read

LiteLLM Exposed Admin Key: What Wiz Research Found

Sep 11

9 min read

N-able N-central CVE-2026-86218: Pre-Auth RCE and MSP Fleet Risk

Sep 11

6 min read

MikroTrick Turns Exposed RouterOS SSH Into Full Admin Takeover

Sep 9

5 min read

More Stories

Gentlemen Ransomware Uses BYOVD EDR Killers to Disable Endpoint Defenses

Introduction Ransomware operators increasingly recognize that defeating security tools can be just as important as…

Jun 19

6 min read

Latest Stories

F5 BIG-IP APM Rootkit: How PoisonedRefresh Hides a Web Shell in Memory

Sep 9

7 min read

Slim Spider Cloud Metadata Attack on Crypto Custody Secrets at a Brazilian Financial Institution

Sep 9

7 min read

PEEP Malware Turns Chrome and Edge Into Post-Compromise Backdoors

Sep 8

7 min read

REVSTEALER, ProManager, WinUpdate, SoftManager and LockAppHost: How the Modules Put Windows at Risk

Sep 8

11 min read

Ted Backdoor Hijacks HAProxy to Intercept Web Traffic

Sep 7

7 min read

More Stories

Fake Brand Interviews Use Browser-in-the-Browser Phishing to Steal Google Credentials

A new Google account phishing campaign is using fake big-brand job interview lures to steal…

Jul 9

5 min read

Latest Stories

AdaptHealth Data Breach: Contractor Account Compromise, Cloud Apps, and Healthcare IAM Lessons

Sep 10

7 min read

Invisible Unicode Phishing Splits Words to Evade Email Filters

Sep 7

7 min read

French Hospital Fine Shows How One Compromised Account Can Expose an Entire Patient System

Sep 4

6 min read

Faronics Deploy Abuse Turns Endpoint Management into an Attack Path

Sep 2

9 min read

McKesson Breach: How a Vishing Call Turned Into an Okta and Salesforce Incident

Sep 1

6 min read

More Stories

DuneSlide Cursor AI Flaws: Prompt Injection Meets Developer Endpoint RCE

Two critical Cursor AI code editor vulnerabilities, known as DuneSlide, show how untrusted prompts can…

Jul 6

7 min read

Latest Stories

AI Token Theft and MFA Bypass: Lessons From Infostealer Logs

Sep 11

6 min read

DeepSeek Harness CVE-2026-82533 Let AI Agents Disable Their Own Sandbox

Sep 11

7 min read

AdaptHealth Data Breach: Contractor Account Compromise, Cloud Apps, and Healthcare IAM Lessons

Sep 10

7 min read

ChatGPT Gmail Exfiltration Flaw: Enterprise AI App Governance and XDR Lessons

Sep 9

6 min read

Autonomous AI Cyberattack: Credential Theft in Under Six Hours

Sep 9

6 min read

More Stories