A sophisticated threat campaign dubbed “FortiBleed” has compromised approximately 430,000 FortiGate firewall devices worldwide, resulting in the exfiltration of over 110 million credentials. Attackers exploited previously disclosed vulnerabilities in Fortinet’s SSL-VPN implementation to harvest auth
Critical NGINX vulnerability CVE-2026-8711 lets remote attackers execute malicious code via heap overflow. Unauthenticated exploitation possible. Patch now.
Gogs, the lightweight self-hosted Git service, has released an emergency patch for a critical zero-day vulnerability enabling unauthenticated remote code execution (RCE). The flaw, actively exploited in the wild, affects versions prior to 0.13.0+dev and allows attackers to execute arbitrary commands
GitHub has disabled automatic execution of npm lifecycle scripts following discoveries of malicious exploitation. The platform will no longer automatically run `preinstall`, `install`, and `postinstall` scripts during package installation on GitHub-hosted services. This critical security decision co
Pwn2Own Berlin 2026 wraps up: $1.3M paid out for 47 zero-days. DEVCORE takes Master of Pwn with $505K. Three intense days of enterprise exploits.
A coordinated international operation has successfully cleaned 14,971 compromised WordPress websites infected with the SocGholish malware framework. This sophisticated JavaScript-based infection chain has been actively targeting WordPress sites for years, delivering fake browser updates that install
Threat actors are increasingly abusing legitimate system administration and software deployment tools to deliver malware while evading detection. By leveraging trusted binaries like PowerShell, Windows Management Instrumentation (WMI), and legitimate remote access software, attackers bypass traditio
Ukrainian threat group UAC-0145 has launched a sophisticated social engineering campaign using fake CAPTCHA verification prompts, known as “ClickFix,” to trick users into executing malicious PowerShell commands. The campaign specifically targets Ukrainian users through compromised websites and phish
A critical authentication bypass vulnerability in HP Poly VoIP phones (CVE-2024-41937) allows unauthenticated attackers to gain administrative access to affected devices. With a CVSS score of 9.8, this flaw affects multiple Poly phone models widely deployed across enterprise environments. Attackers
Acer Wave 7 Mesh WiFi routers contain multiple maximum severity (CVSS 10.0) zero-day vulnerabilities that allow unauthenticated remote attackers to execute arbitrary code, bypass authentication, and gain complete control over affected devices. These critical flaws remained unpatched at the time of d