Pixel 10 Rooted Via 0-Click Exploit Chain In 5 Lines
Researchers chain 0-click Dolby exploit with new VPU driver bug to root Pixel 10. The kernel flaw took just 5 lines of code to exploit. Patched in 71 days.
Read More
14,000 SimpleHelp Servers Exposed By Critical Flaw
A critical authentication bypass vulnerability in SimpleHelp remote support software has left nearly 14,000 publicly accessible servers exposed to potential compromise. The flaw allows unauthenticated attackers to gain unauthorized access to remote desktop sessions, potentially exposing sensitive co
SANDWORM_MODE Supply Chain Attack Targets AI Toolchains
A sophisticated supply chain attack dubbed SANDWORM_MODE has emerged targeting AI development toolchains, compromising machine learning pipelines through poisoned dependencies. The attack leverages vulnerabilities in popular Python packages used for AI/ML model training, allowing attackers to inject
Record Patch Tuesday: 208 Microsoft, 123 Adobe CVEs
Microsoft and Adobe have issued a historic combined total of 331 security vulnerabilities in their June 2026 Patch Tuesday release—the largest security update drop ever recorded. Microsoft addressed 208 CVEs affecting Windows, Office, Azure, and other products, including 15 zero-days and 8 actively
FBI Warns Of Fast-Growing Kali365 Phishing Kit Threat
The FBI has issued an urgent warning about Kali365, a sophisticated phishing-as-a-service (PhaaS) kit specifically designed to compromise Microsoft 365 accounts. This turnkey solution enables even low-skilled cybercriminals to launch convincing phishing campaigns that bypass multi-factor authenticat
ChocoPoC RAT Targets Researchers: Fake GitHub Exploit Repos
A new remote access trojan dubbed ChocoPoC is actively targeting vulnerability researchers through weaponized GitHub repositories disguised as proof-of-concept (PoC) exploit code. Attackers create convincing fake exploit repos for recent CVEs, tricking security professionals into downloading and exe
Red Hat npm Packages Compromised In Credential Theft Attack
Multiple npm packages maintained by Red Hat were compromised in a sophisticated supply chain attack dubbed “Miasma.” Attackers gained unauthorized access to Red Hat developer credentials and injected malicious preinstall scripts designed to harvest environment variables, AWS credentials, and other s
macOS 27 Golden Gate: Beyond The AI Hype
Apple’s macOS 27 Golden Gate introduces significant security enhancements that extend far beyond its marketed AI features. Key improvements include mandatory kernel extension validation, enhanced sandboxing for third-party applications, expanded FileVault protections, improved network filtering capa
Microsoft Defender Zero-Day Grants SYSTEM Access
A critical zero-day vulnerability dubbed “RoguePlanet” in Microsoft Defender allows attackers with basic user access to escalate privileges to SYSTEM-level control on Windows machines. The flaw exploits Defender’s built-in scanning mechanisms through a time-of-check-time-of-use (TOCTOU) race conditi
Citrix CVE-2026-53565: Critical Privilege Escalation Flaw
Citrix has disclosed CVE-2026-53565, a critical privilege escalation vulnerability affecting Citrix Secure Access and Endpoint Client for Windows. The flaw allows authenticated attackers with low-level privileges to escalate to SYSTEM-level access, potentially compromising entire enterprise networks