The Federal Communications Commission (FCC) has proposed new regulations that would effectively eliminate anonymous phone ownership in the United States by requiring identity verification for all mobile device activations. The proposal mandates carriers to collect and verify government-issued identi
Day Two of Pwn2Own Berlin 2026: $523K awarded for 24 zero-days on Day One. SharePoint, Exchange, and Safari under attack today. The race for Master of Pwn intensifies
Oracle E-Business Suite (EBS) is facing active exploitation of CVE-2026-46817, a critical unauthenticated remote code execution vulnerability affecting multiple versions. Security researchers have identified approximately 950 internet-facing systems vulnerable to attack, with threat actors already l
A Microsoft-owned website recently became inaccessible to users after its SSL/TLS certificate expired without renewal, triggering browser security warnings and effectively taking the site offline. This embarrassing incident highlights how even tech giants can fall victim to basic certificate managem
A sophisticated clipper malware campaign leveraging Tor network infrastructure is actively targeting cryptocurrency users by intercepting and replacing wallet addresses in the clipboard while simultaneously exfiltrating seed phrases. This malware operates stealthily, monitoring clipboard activity fo
New TencShell malware gives attackers complete remote control of infected systems—full screen access, browser data theft, and UAC bypass capabilities detected
Chinese state-sponsored threat actor TA4922 has broadened its phishing campaign beyond traditional targets, now hitting organizations in the United Kingdom, Germany, Italy, and South Africa. The group deploys sophisticated credential harvesting infrastructure using compromised legitimate domains and
Microsoft has reversed its stance following a public confrontation with a security researcher over a zero-day vulnerability disclosure. The tech giant initially disputed the researcher’s findings and delayed patching, but mounting pressure from the security community forced a policy reassessment. Th
Critical 0-day in Palo Alto PAN-OS lets attackers execute code with root privileges on enterprise firewalls. CVE-2026-0300 actively exploited in the wild.
Citrix has patched a critical vulnerability in NetScaler ADC and Gateway appliances that shares alarming similarities with the infamous CitrixBleed exploit. CISA has added this flaw to its Known Exploited Vulnerabilities catalog, signaling active or imminent exploitation. Organizations running affec