A critical vulnerability in Adobe’s Acrobat Chrome extension allowed malicious websites to access and exfiltrate private WhatsApp Web conversations without user consent. The flaw, stemming from improper content security policies and message handling, enabled arbitrary websites to inject scripts into
Cisco has released open-weight AI models specifically designed for vulnerability detection, directly challenging proprietary offerings from Google and OpenAI. These models promise enterprise-grade bug detection capabilities while maintaining transparency and customizability that closed-source altern
Recent testing has confirmed that Russian satellites possess the capability to jam GPS signals across entire continents, representing a significant escalation in electronic warfare capabilities. This space-based jamming threatens critical infrastructure, aviation, maritime navigation, financial syst
INTERPOL’s Operation Ramz strikes hard: 201 arrested, 382 suspects identified across MENA region. Major cybercrime networks dismantled in historic crackdown.
A critical remote code execution (RCE) vulnerability (CVE-2026-63030) in WordPress core is being actively exploited in the wild. The flaw allows unauthenticated attackers to execute arbitrary code on vulnerable WordPress installations, affecting versions prior to the emergency security release. Mass
Critical 0-day in Palo Alto PAN-OS lets attackers execute code with root privileges on enterprise firewalls. CVE-2026-0300 actively exploited in the wild.
CISA has added CVE-2025-67038 to its Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation of a critical authentication bypass vulnerability in Lantronix EDS5000 terminal servers. The flaw allows unauthenticated attackers to gain administrative access remotely, posing severe
A lone threat actor successfully published 14 malicious npm packages designed to impersonate legitimate OpenSearch and Elasticsearch libraries. These typosquatting packages contained credential-harvesting code that targeted developers’ authentication tokens and environment variables. The malicious l
North Korean threat actors have deployed macOS.Gaslight, a sophisticated Rust-based backdoor that employs an unprecedented defensive mechanism: weaponized prompt injection attacks targeting security analysts using AI-powered analysis tools. Rather than escaping sandboxes through prompt manipulation,
Microsoft patched CVE-2026-96951, a zero-day in Windows Shell actively exploited to bypass Mark of the Web security controls. The CVSS 8.8 flaw affects all Windows versions and requires immediate patching as threat actors weaponized it before disclosure.