7-Zip RCE Bug Highlights the Hidden Cost of Manual App Updates

The latest 7-Zip vulnerability affects how the application handles XZ-compressed data. A specially crafted archive…

Jul 21

4 min read

All Stories

x47.c Windows Botnet: Credential Theft and AI-Assisted Persistence

Oct 6

5 min read

DIVD Breach Shows Agentic AI Can Run Messy Autonomous Post-Exploitation

Oct 6

5 min read

Citrix NetScaler CVE-2026-88772 Exploitation: Web Shells, Root Access and Internal Tunneling

Sep 30

7 min read

Branch Target Reuse: Spectre v2 Flaw Leaks Linux Root Hash

Sep 30

7 min read

Supabase Data Exposure: How 16,326 Databases Became Readable

Sep 29

8 min read

More Stories

Microsoft June 2026 Patch Tuesday Breaks Records with Around 200 Vulnerability Fixes

The Microsoft June 2026 Patch Tuesday release has become Microsoft’s largest Patch Tuesday update to…

Jun 11

5 min read

Latest Stories

Citrix NetScaler CVE-2026-88772 Exploitation: Web Shells, Root Access and Internal Tunneling

Sep 30

7 min read

Branch Target Reuse: Spectre v2 Flaw Leaks Linux Root Hash

Sep 30

7 min read

Supabase Data Exposure: How 16,326 Databases Became Readable

Sep 29

8 min read

PeopleSoft WAF Bypass Lets UNC6240 Reopen a Critical RCE Campaign

Sep 28

4 min read

CISA KEV Alert: WSO2 CVE-2026-5430 and Adobe Commerce CVE-2026-71362

Sep 28

6 min read

More Stories

Gentlemen Ransomware Uses BYOVD EDR Killers to Disable Endpoint Defenses

Introduction Ransomware operators increasingly recognize that defeating security tools can be just as important as…

Jun 19

6 min read

Latest Stories

NeedyMantis malware: How a modular toolkit supports targeted intrusions

Sep 29

6 min read

JadePuffer Azure Attack: Storm-3168 Hits Service Principals

Sep 29

8 min read

third-party.com Malware: Placeholder Domain Fuels ClickFix Attack

Sep 28

6 min read

Ukrainian Business Sites Become ClickFix Launchpads for Psychedelic Stealer

Sep 25

5 min read

Malicious Terraform Providers Deliver Go Malware via HashiCorp

Sep 24

6 min read

More Stories

Fake Brand Interviews Use Browser-in-the-Browser Phishing to Steal Google Credentials

A new Google account phishing campaign is using fake big-brand job interview lures to steal…

Jul 9

5 min read

Latest Stories

EvilTokens Phishing: How a Device-Code Attack Hit 12,000 Inboxes

Sep 23

7 min read

WaterPlum Cyber Actor Targets Developers via Fake Interviews

Sep 21

5 min read

Revolut Data Breach: Infostealer Credentials and Fake Government Requests

Sep 21

6 min read

IDScan breach: Why leaked identity data is an IAM security concern

Sep 16

7 min read

Blob URL Phishing: How Browser-Generated Pages Challenge Enterprise Identity Defense

Sep 15

8 min read

More Stories

DuneSlide Cursor AI Flaws: Prompt Injection Meets Developer Endpoint RCE

Two critical Cursor AI code editor vulnerabilities, known as DuneSlide, show how untrusted prompts can…

Jul 6

7 min read

Latest Stories

x47.c Windows Botnet: Credential Theft and AI-Assisted Persistence

Oct 6

5 min read

DIVD Breach Shows Agentic AI Can Run Messy Autonomous Post-Exploitation

Oct 6

5 min read

OpenAI Agents Probed Websites After Routine Data Retrieval Failed

Sep 25

7 min read

AI Coding Assistant Hijack Spreads Shai-Hulud Across About 100 Repositories

Sep 18

7 min read

BragJack Attack Exposes Agentic Browser AI to Hijacking

Sep 18

6 min read

More Stories