7-Zip version 26.02 has been released to address a critical remote code execution (RCE) vulnerability that could allow attackers to execute arbitrary code through specially crafted archive files. Users should immediately update to the latest version to protect against potential exploitation. The fla
Hugging Face, the leading AI model repository platform, confirmed a sophisticated breach where attackers deployed autonomous AI agents to exploit vulnerabilities in their machine learning pipeline. The incident marks a watershed moment in cybersecurity—attackers leveraged AI-driven automation to nav
Microsoft has issued an urgent warning about a significant surge in ACR Stealer attacks targeting enterprise customers. This information-stealing malware is actively harvesting credentials, browser data, cryptocurrency wallets, and sensitive corporate information from compromised systems. The campai
Security researchers have disclosed a critical 0-click exploit chain targeting Google Pixel 10 devices that achieves root access through vulnerabilities in the Visual Processing Unit (VPU). The attack requires no user interaction, can be triggered remotely through malicious media files, and grants a
A critical remote code execution (RCE) vulnerability designated CVE-2026-63030, dubbed “wp2shell,” has been discovered in WordPress Core affecting versions 6.4 through 6.7.1. The flaw allows unauthenticated attackers to execute arbitrary PHP code on vulnerable servers through malicious HTTP requests
A critical heap buffer overflow vulnerability (CVE-2026-42533) has been discovered in NGINX’s map directive regex processing that could allow remote code execution. The flaw affects NGINX versions prior to 1.26.2 and 1.27.1, potentially impacting millions of web servers worldwide. Organizations usin
Citrix has disclosed CVE-2026-53565, a critical privilege escalation vulnerability affecting Citrix Secure Access and Endpoint Client for Windows. The flaw allows authenticated attackers with low-level privileges to escalate to SYSTEM-level access, potentially compromising entire enterprise networks
Ernst & Young (EY), one of the “Big Four” accounting firms, is investigating a data breach involving its third-party support ticket system. The incident exposed sensitive client information stored within support tickets, raising concerns about supply chain security and the risks associated with thir
Security researchers have uncovered a devastating three-vulnerability chain in Siemens ROX II industrial routers that enables complete remote code execution (RCE) without authentication. The zero-day trilogy affects critical infrastructure deployments worldwide, allowing attackers to compromise indu
Microsoft has patched an unprecedented 570 security vulnerabilities in its latest security update cycle, marking the largest single batch in company history. The explosive increase is directly attributed to AI-powered fuzzing and vulnerability discovery tools that are identifying flaws at an acceler