The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical Drupal Core vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. The flaw, which affects multiple versions of the popular content management system, allows
Two former executives of US-based payment processing companies have pleaded guilty to federal charges for their role in facilitating a massive tech support scam operation. The executives knowingly processed payments for fraudulent tech support schemes that defrauded thousands of victims, primarily e
Zimperium zLabs uncovered a 10-month Android malware campaign involving 250 fake apps that silently enrolled victims in premium SMS services across four countries. The operation abused Google’s SMS Retriever API and hidden WebViews to bypass user consent and intercept authentication codes.
A sophisticated Android ad fraud operation called “Trapdoor” has been discovered operating through 455 malicious apps on Google Play Store, generating fake ad clicks to defraud advertisers. The campaign remained undetected for months, affecting millions of users who unknowingly participated in large
Popular @antv npm packages were compromised to inject malicious code that steals CI/CD credentials, environment variables, and Git tokens from developer systems. Over 1.5 million weekly downloads put thousands of organizations at risk of supply chain attacks targeting their build pipelines and deplo
A new privilege escalation vulnerability dubbed PinTheft affects Arch Linux’s sudo implementation, allowing attackers to bypass PIN authentication and gain root access. Public exploit code is now available, and administrators must update immediately or implement specific workarounds to prevent unaut
TeamPCP supply chain attack escalates: Jenkins plugin compromised, new worm spreads across npm and PyPI. The loudest activity since March’s Trivy disclosure.
BREAKING: Hackers already exploiting critical NGINX RCE flaw CVE-2026-42945. Real-world attacks detected days after disclosure. Patch immediately.
Grafana Labs confirms source code stolen after attackers compromised GitHub environment with stolen access token. Another reminder that token security is critical.
Microsoft Edge finally stops storing passwords in plaintext memory after security researcher flags the risk. A long-overdue fix for a dangerous practice.