A critical vulnerability in the Linux kernel, tracked as CVE-2024-43503 and dubbed “DirtyClone,” allows local attackers to escalate privileges to root level. This marks the fourth significant kernel flaw discovered in just six weeks, affecting multiple Linux distributions. The vulnerability resides
Europol and international partners dismantled First VPN, a service widely used by ransomware gangs, seizing 33 servers and arresting its alleged administrator. The operation, codenamed Saffron, also exposed thousands of users whose data is now in the hands of investigators across 16 countries.
The “Nightmare Eclipse” incident has reignited long-standing tensions between security researchers and software vendors over responsible disclosure practices. A critical vulnerability discovery turned contentious when disagreements over patch timelines, credit attribution, and public disclosure led
A critical authentication bypass vulnerability in Python.org’s API infrastructure allowed attackers to forge admin-level API requests without proper credentials. The flaw exploited weak authentication token validation, enabling potential unauthorized access to administrative functions, user data man
A critical Remote Code Execution (RCE) vulnerability in LiteLLM, a popular open-source proxy server for Large Language Models, is being actively exploited by threat actors in the wild. The vulnerability allows unauthenticated attackers to execute arbitrary commands on vulnerable systems, potentially
A sophisticated clipper malware campaign leveraging Tor network infrastructure is actively targeting cryptocurrency users by intercepting and replacing wallet addresses in the clipboard while simultaneously exfiltrating seed phrases. This malware operates stealthily, monitoring clipboard activity fo
Google has released an emergency security update for Chrome addressing multiple critical vulnerabilities, including CVE-2025-0411 and CVE-2025-0410, which could allow remote attackers to execute arbitrary code on affected systems. These high-severity bugs affect Chrome’s V8 JavaScript engine and ANG
Anthropic has updated its privacy policy to include identity verification measures for Claude users, marking a significant shift in how AI companies handle user authentication and data collection. The new policy enables Anthropic to request and store government-issued identification documents, biome
A Ukrainian national has pleaded guilty in U.S. federal court to participating in the notorious Conti ransomware operation, one of the most prolific cybercrime syndicates in recent history. Following his extradition, the defendant admitted to deploying ransomware, exfiltrating sensitive data, and fa
Millenium RAT, a sophisticated remote access trojan rewritten in C++, has compromised over 62,000 devices across 160 countries in an accelerating global campaign. The malware features advanced persistence mechanisms, credential harvesting capabilities, and keylogging functionality. Attackers are dis