A previously undocumented cyber espionage operation, dubbed SilkParasite, has been observed targeting government organizations across Central … SilkParasite Cyber Espionage Campaign Targets Central Asian Governments With New RATsRead more
Month: August 2026
CISA Warns of Four Critical Vulnerabilities Being Exploited in the Wild
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical security vulnerabilities to its … CISA Warns of Four Critical Vulnerabilities Being Exploited in the WildRead more
Apple Sends Spyware Threat Notifications to Users in 110 Countries
Apple has issued a new round of threat notifications to customers who may have been targeted … Apple Sends Spyware Threat Notifications to Users in 110 CountriesRead more
New PATCHCORD Backdoor Targets Afghan Telecom and South Asian Critical Infrastructure
Afghan telecommunications providers and critical infrastructure organizations across South Asia are being targeted in an ongoing … New PATCHCORD Backdoor Targets Afghan Telecom and South Asian Critical InfrastructureRead more
737 Chrome VPN Extensions Exposed for Secretly Routing Browser Traffic Through SOCKS5 Proxies
A massive campaign involving 737 free VPN and proxy browser extensions has been uncovered, with the … 737 Chrome VPN Extensions Exposed for Secretly Routing Browser Traffic Through SOCKS5 ProxiesRead more
Windows Plug and Play Attack Can Turn Signed Vendor Software Into SYSTEM Access
Windows Plug and Play (PnP) can potentially be abused to turn legitimate, signed vendor software into … Windows Plug and Play Attack Can Turn Signed Vendor Software Into SYSTEM AccessRead more
77 Malicious Open VSX Extensions Found Stealing Developer and CI Environment Data
Security researchers have uncovered 77 malicious extensions on the Open VSX Marketplace that masqueraded as legitimate … 77 Malicious Open VSX Extensions Found Stealing Developer and CI Environment DataRead more
Google, Anthropic, and OpenAI Patch Critical AI Coding Agent Vulnerabilities
Security researchers have uncovered multiple vulnerabilities affecting AI-powered coding assistants from Anthropic, Google, and OpenAI, demonstrating … Google, Anthropic, and OpenAI Patch Critical AI Coding Agent VulnerabilitiesRead more
Linux SCTPhantom Vulnerability (CVE-2026-64564) Enables Root Access and Container Escape
A newly disclosed Linux kernel vulnerability, CVE-2026-64564, dubbed SCTPhantom, has revealed how an 18-year-old bug in … Linux SCTPhantom Vulnerability (CVE-2026-64564) Enables Root Access and Container EscapeRead more
Zapscape (CVE-2026-64561): Critical Linux KVM Vulnerability Enables VM Escape to Host
A newly disclosed Linux kernel vulnerability, dubbed Zapscape, could allow attackers with kernel-level access inside a … Zapscape (CVE-2026-64561): Critical Linux KVM Vulnerability Enables VM Escape to HostRead more
