Security researchers discovered a critical zero-click vulnerability in Google Pixel 10’s Video Processing Unit (VPU) driver that allowed attackers to access entire kernel memory without user interaction. The exploit chain bypassed multiple security layers, enabling complete device compromise through
Banana RAT malware spreads through fake invoices targeting 16 Brazilian banks. QR code fraud drains accounts while victims think they’re paying bills.
Microsoft, Atom Computing, and EeroQ have announced significant quantum computing advances that push the technology closer to practical applications. While these breakthroughs promise revolutionary computational capabilities, they accelerate the timeline for quantum computers to break current encryp
A critical heap-based buffer overflow vulnerability (ZDI-26-360) has been discovered in the MATE Desktop Atril document viewer that allows remote code execution when processing malicious EPUB files. The flaw exists in the EPUB file parsing functionality and can be triggered by simply opening a speci
A stock exchange executive’s Microsoft Outlook email account was compromised for approximately 150 days in a sophisticated cyber espionage operation. The attacker maintained persistent access to highly sensitive financial communications, corporate strategies, and confidential market information. Thi
Department of Homeland Security (DHS) Secretary Markwayne Mullin has identified specific staffing targets for the Cybersecurity and Infrastructure Security Agency (CISA) amid ongoing federal workforce reductions. This organizational restructuring comes at a critical juncture when cyber threats again
Ivanti has disclosed two critical vulnerabilities in Ivanti Sentry—CVE-2026-10520 and CVE-2026-10523—that enable unauthenticated attackers to achieve remote code execution (RCE). CVE-2026-10520 is an authentication bypass vulnerability with a CVSS score of 9.8, while CVE-2026-10523 is a command inje
Microsoft has significantly evolved its Cloud-Native Application Protection Platform (CNAPP) capabilities, aligning with industry-leading cloud security solutions. The enhancement consolidates multiple security tools into a unified platform, offering comprehensive visibility, risk assessment, and th
Threat actors are distributing the Deno-based remote access trojan (RAT) through fake software repositories on GitHub and SourceForge. These malicious packages masquerade as legitimate development tools and productivity software, targeting developers and tech-savvy users. The Deno RAT provides attac
eSIM technology is rapidly displacing traditional physical SIM cards, offering convenience and flexibility but introducing new attack surfaces. While eSIMs eliminate physical theft vulnerabilities, they create opportunities for remote exploitation, SIM swap attacks, and unauthorized profile provisio