Google has released a massive security update for Chrome, addressing 429 vulnerabilities including 22 critical-severity bugs. This represents one of the largest security patches in Chrome’s history, with flaws spanning memory corruption, use-after-free vulnerabilities, and type confusion issues acro
A critical zero-day vulnerability in Hitachi’s KnowledgeDeliver Learning Management System (LMS) is being actively exploited to deploy Godzilla webshells and Cobalt Strike beacons. Attackers are leveraging an authentication bypass flaw to gain unauthorized access, establish persistent backdoors, and
Anonymous researcher drops two new Windows zero-days: YellowKey bypasses BitLocker encryption while GreenPlasma exploits CTFMON for privilege escalation.
Threat actors are leveraging Large Language Model (LLM) agents to automate post-exploitation activities after successfully compromising systems through CVE-2026-39987, a critical vulnerability in Marimo, a popular Python notebook framework. This novel attack chain represents a significant evolution
Security researchers discovered that AI coding assistants can be tricked into generating malicious code through seemingly innocent “fix this code” prompts—no sophisticated jailbreaking required. The vulnerability, demonstrated with a system dubbed “Fable 5,” raised concerns among federal authorities
Meta has integrated face recognition capabilities into its smart glasses platform, triggering widespread privacy concerns and regulatory scrutiny. The technology, embedded within the glasses’ firmware, can identify individuals in real-time without their knowledge or consent. While Meta claims the fe
The U.S. Department of Defense has officially acknowledged that commercially available location data from smartphones and connected devices poses a significant operational security risk to military personnel and missions. This admission validates long-standing concerns about how adversaries can expl
OpenAI employee devices compromised through poisoned npm packages. Limited credentials stolen in TanStack supply chain attack. Even tech giants aren’t immune.
Chinese state-sponsored threat actors have developed a sophisticated email exfiltration technique that abuses legitimate Google Workspace email forwarding rules. The campaign targeted defense contractors and research institutions, automatically forwarding sensitive emails to attacker-controlled acco
A data breach notification appearing on Maine’s government portal claims Discord exposed 10 million user records, but multiple inconsistencies in the filing raise serious questions about its legitimacy. The notice lacks official Discord confirmation, contains unusual formatting, and exhibits charact