A maximum severity CVSS 10.0 vulnerability dubbed “RufRoot” has been discovered in Ruflo, allowing unauthenticated attackers to hijack user accounts remotely without requiring any login credentials. The flaw bypasses all authentication mechanisms, granting attackers complete control over targeted ac
Anthropic’s AI assistant Claude experienced a significant service outage coinciding with the company’s highly anticipated stock market debut. The disruption affected thousands of users globally, preventing access to Claude’s web interface, API services, and mobile applications for several hours. Whi
A sophisticated phishing campaign is targeting Signal users, particularly journalists and activists, attempting to steal backup recovery keys that would grant attackers access to encrypted message histories. The attack leverages social engineering tactics mimicking official Signal communications, ex
Chinese state-sponsored threat actors have developed a sophisticated email exfiltration technique that abuses legitimate Google Workspace email forwarding rules. The campaign targeted defense contractors and research institutions, automatically forwarding sensitive emails to attacker-controlled acco
Sports organizations are deploying advanced surveillance systems including cameras, sensors, and 3D body scanning technology to create digital twin models of athletes. While designed to improve officiating accuracy and performance analytics, these systems collect highly sensitive biometric data that
Cisco SD-WAN infrastructure is under active attack from a critical zero-day vulnerability that grants attackers root-level access to vulnerable systems. The flaw, affecting multiple SD-WAN components, is being actively exploited in the wild before patches are available. Organizations running Cisco S
Nissan Motor Corporation disclosed a significant data breach affecting employee information after threat actors exploited a zero-day vulnerability in Oracle PeopleSoft. The automotive giant confirmed that unauthorized access occurred through their HR management system, compromising sensitive employe
A critical heap-based buffer overflow vulnerability (ZDI-26-360) has been discovered in the MATE Desktop Atril document viewer that allows remote code execution when processing malicious EPUB files. The flaw exists in the EPUB file parsing functionality and can be triggered by simply opening a speci
OpenClaw, an AI-powered email management agent, has been compromised through phishing attacks, resulting in the exposure of sensitive user data. The incident demonstrates a critical vulnerability in autonomous AI systems that process emails without adequate security controls. Multiple users reported
Security researchers exploited Samsung Galaxy S26 devices three additional times at Pwn2Own Ireland 2026, contributing to 45 zero-day vulnerabilities discovered. The $232,500 bounty payout highlights critical security gaps requiring immediate SOC attention and patch preparation.