Google has released an emergency security update for Chrome to address CVE-2026-11645, a high-severity use-after-free vulnerability in the V8 JavaScript engine actively exploited in the wild. The zero-day affects all major platforms (Windows, macOS, Linux) and enables remote code execution through m
The U.S. government has mandated Anthropic to immediately suspend access to its advanced AI models, Fable 5 and Mythos 5, for foreign nationals. This unprecedented move highlights escalating concerns about AI capabilities being weaponized for cyber operations, disinformation campaigns, and potential
Over 400 packages in the Arch User Repository (AUR) were compromised in a sophisticated supply chain attack that deployed information-stealing malware and an eBPF-based rootkit. The attacker hijacked maintainer accounts and injected malicious code into build scripts, affecting thousands of users who
Iranian threat actor Handala successfully compromised a California water utility’s operational technology systems in a targeted cyberattack that demonstrated sophisticated knowledge of critical infrastructure vulnerabilities. While the breach resulted in limited operational disruption, the incident
A critical zero-day vulnerability in Oracle PeopleSoft has been actively exploited in the wild, affecting hundreds of organizations globally. Attackers leveraged this previously unknown flaw to exfiltrate gigabytes of sensitive data from enterprise systems, including HR records, financial informatio
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical path traversal vulnerability in Ivanti Sentry (CVE-2023-38035, CVSS 9.8) to its Known Exploited Vulnerabilities (KEV) catalog. Federal agencies must patch affected systems by June 14, 2024, following confirmed acti
Russian state-sponsored threat actor Fancy Bear (APT28) has been leveraging compromised Ubiquiti EdgeRouters and cloud infrastructure to conduct sophisticated, low-profile cyberattacks against high-value targets. The group exploits legacy router firmware vulnerabilities and misconfigured devices to
A coordinated international law enforcement operation involving US, French, and Italian authorities successfully dismantled a major deepfake pornography website that victimized thousands of individuals. The site used AI-powered tools to create non-consensual synthetic sexual content, generating sign
The Atomic Arch campaign has compromised over 20 packages in the Arch User Repository (AUR), a popular community-driven repository for Arch Linux users. Attackers hijacked legitimate package maintainer accounts to inject malicious payloads that steal sensitive information, establish persistence, and
Cybercriminals are exploiting NinjaOne, a legitimate Remote Monitoring and Management (RMM) software, to establish persistent access and execute malicious commands while evading traditional security defenses. By leveraging trusted administrative tools, attackers bypass signature-based detection and