A newly disclosed Linux kernel vulnerability, known as DirtyClone, enables local attackers to escalate privileges to … DirtyClone Linux Kernel Vulnerability (CVE-2026-43503) Lets Local Users Gain Root AccessRead more
Popular Chrome Extension With 10 Million Users Found Capable of Executing Arbitrary JavaScript
A widely used Google Chrome extension designed to block YouTube advertisements has come under scrutiny after … Popular Chrome Extension With 10 Million Users Found Capable of Executing Arbitrary JavaScriptRead more
Microsoft Warns of Hotel Phishing Campaign Delivering TonRAT Malware via Fake Booking Emails
Microsoft has uncovered an ongoing phishing campaign targeting hotels and hospitality organizations across Europe and Asia. … Microsoft Warns of Hotel Phishing Campaign Delivering TonRAT Malware via Fake Booking EmailsRead more
Linux Kernel Vulnerability CVE-2026-46331 Allows Local Users to Gain Root Access
A newly disclosed Linux kernel vulnerability, CVE-2026-46331, also known as “pedit COW,” allows local, unprivileged users … Linux Kernel Vulnerability CVE-2026-46331 Allows Local Users to Gain Root AccessRead more
Cordyceps CI/CD Vulnerability Exposes Microsoft, Google, and Other Major Open-Source Repositories
Cybersecurity researchers have identified a dangerous new class of CI/CD (Continuous Integration and Continuous Deployment) workflow … Cordyceps CI/CD Vulnerability Exposes Microsoft, Google, and Other Major Open-Source RepositoriesRead more
FortiBleed Campaign Hits 430,000+ FortiGate Firewalls, Harvests Millions of Credentials
Security researchers have uncovered a massive credential-harvesting operation dubbed FortiBleed, which has reportedly targeted more than … FortiBleed Campaign Hits 430,000+ FortiGate Firewalls, Harvests Millions of CredentialsRead more
U.S. Seizes HuiOne Cloud Infrastructure, Sanctions Prince Group Over Cyber Fraud Links
The U.S. Department of Justice (DoJ) has announced the seizure of a cloud computing account allegedly … U.S. Seizes HuiOne Cloud Infrastructure, Sanctions Prince Group Over Cyber Fraud LinksRead more
Trump Signs Executive Order Requiring Federal Agencies to Adopt Post-Quantum Cryptography by 2031
President Donald Trump has signed a new executive order aimed at strengthening the cybersecurity posture of … Trump Signs Executive Order Requiring Federal Agencies to Adopt Post-Quantum Cryptography by 2031Read more
WhatsApp Malware Campaign Uses Fake Financial Documents to Install Remote Access Tools
Security researchers have uncovered an ongoing malware campaign that uses WhatsApp messages to spread malicious Visual … WhatsApp Malware Campaign Uses Fake Financial Documents to Install Remote Access ToolsRead more
Critical Supply Chain Attack Compromises Popular WordPress Plugins Through Official Updates
A serious supply chain attack has impacted several premium WordPress plugins developed by ShapedPlugin, exposing thousands … Critical Supply Chain Attack Compromises Popular WordPress Plugins Through Official UpdatesRead more