Tata Electronics, a key supplier for tech giants Apple and Tesla, has confirmed a significant data breach after threat actors claimed to have exfiltrated 630GB of sensitive corporate data. The leak allegedly contains proprietary manufacturing information, employee records, and confidential business
A sophisticated supply chain attack orchestrated by the threat group TeamPCP has successfully infiltrated GitHub and Microsoft infrastructure, with malicious activity detected through May 24, 2026. The campaign leverages compromised developer accounts and poisoned packages to distribute malware acro
A critical vulnerability in LiteLLM (CVE-2026-42271) is being actively exploited in the wild, allowing attackers to chain multiple flaws and achieve unauthenticated remote code execution. The flaw affects LiteLLM’s proxy server component and can be exploited without authentication, making it a sever
Security researchers have disclosed a sophisticated zero-click exploit chain targeting Google’s Pixel 10 devices that achieves full root access without any user interaction. The attack leverages vulnerabilities in the device’s messaging subsystem and kernel, allowing remote attackers to compromise d
Threat actors are cloning legitimate websites of popular reverse engineering and security analysis tools—including Ghidra, dnSpy, and others—to distribute malware-laden versions. These fraudulent sites appear in search results and trick researchers, developers, and security professionals into downlo
A critical vulnerability dubbed “FortiBleed” is actively being exploited by INC and Lynx ransomware groups to steal credentials from Fortinet firewall systems. Over 430,000 FortiGate SSL VPN devices remain exposed, allowing threat actors to extract plaintext passwords without authentication. Organiz
A newly identified threat actor known as GhostShell has emerged with targeted phishing campaigns against Ukraine’s drone defense sector. The group employs advanced social engineering techniques combined with malicious payloads designed to compromise critical defense infrastructure. This campaign rep
CISA has added a critical Ubiquiti UniFi OS vulnerability (CVE-2025-23093) to its Known Exploited Vulnerabilities catalog after detecting active exploitation in the wild. The flaw, affecting UniFi OS Console versions before 4.1.9, allows unauthenticated remote attackers to execute arbitrary commands
A critical prompt injection vulnerability in Atlassian Rovo’s AI agent allows attackers to manipulate the system into exfiltrating sensitive data from Jira and Confluence instances. By crafting malicious prompts embedded in tickets or documents, threat actors can bypass access controls and extract c
Google has unveiled a groundbreaking deepfake call detection system for Android devices, marking a significant advancement in combating AI-generated voice fraud. This new security feature leverages on-device machine learning to identify synthetic voices during phone calls in real-time, alerting user