Vulnerabilities VantaCore Built Its Own Ransomware Stack — Then Started Hunting Russian NetworksSeptember 4, 2026September 4, 20265 mins
Vulnerabilities Berlin Has Until Today Before Rhysida May Dump 5.7 TB of Stolen Government DataSeptember 4, 20264 mins
Vulnerabilities TVING Lost 39.5 Million Accounts Because Its Developers Left the Keys in the CodeSeptember 4, 20265 mins
Vulnerabilities Dell PowerStore Has 17 Security Bugs. One Can Lead to Remote Code ExecutionSeptember 4, 20265 mins
Vulnerabilities Hackers Didn’t Hack the Update Server. They Hijacked the Internet InsteadSeptember 4, 2026September 4, 20266 mins
Vulnerabilities 153 Million Driver’s Licenses Hit the Dark Web. The FBI Is InvestigatingSeptember 4, 20265 mins
Vulnerabilities Avast Antivirus Has a Claimed 0-Day. The PoC Can Reach SYSTEMSeptember 3, 2026September 3, 20265 mins
Vulnerabilities GeoNetwork Has an Unauthenticated RCE Problem — and Governments Are ExposedSeptember 3, 20265 mins
Vulnerabilities Hackers Turn Brazilian Government Sites Into Gambling MachinesSeptember 3, 20265 mins
Vulnerabilities Cisco Nexus 9000 Has a Root RCE Sitting on Two Network PortsSeptember 3, 2026September 3, 20264 mins
Vulnerabilities The 23-Year-Old Botnet That Refused to Die Just Got Cut OffSeptember 3, 2026September 3, 20264 mins
Vulnerabilities Rails Has a New Shell Problem — Attackers Are Already Hunting KindaRails2ShellSeptember 3, 20264 mins
Vulnerabilities macOS Screen Sharing Is Giving Attackers Root Without a PasswordSeptember 3, 2026September 3, 20263 mins
Vulnerabilities HPE Fabric Composer Has 52 Security Holes. Two Score a Perfect 10September 3, 2026September 3, 20263 mins
Vulnerabilities 3.25 Million WordPress Sites Are Still Sitting on a Backup Time BombSeptember 3, 2026September 3, 20266 mins
Vulnerabilities The Gentlemen Kill Your Security First. Then They Encrypt EverythingSeptember 3, 20265 mins
Vulnerabilities Attackers Are Hitting GitLab’s Critical GraphQL Bug Without Logging InSeptember 3, 20264 mins
Vulnerabilities A WhatsApp Video Call Can Open Your Photo Gallery Without Unlocking Your PhoneSeptember 3, 20265 mins
Vulnerabilities A Critical VMware Bug Can Let Code Escape the VM and Reach the HostSeptember 3, 20264 mins
Vulnerabilities Thomson Reuters Court Data Breach Exposed Files From 11 U.S. States and CanadaSeptember 3, 20265 mins
Vulnerabilities AI Infrastructure Is Being Hacked for Keys, Shells and Crypto MiningSeptember 3, 2026September 3, 20265 mins
Vulnerabilities SonicWall SMA 1000 Is Under Attack: Two Zero-Days Can Open the Door to RCESeptember 3, 2026September 3, 20264 mins
Vulnerabilities CrowdStrike Falcon Has a New 0-Day Problem. The PoC Is Already PublicSeptember 3, 2026September 3, 20264 mins
Vulnerabilities A Critical WordPress Bug Can Hand Attackers Elevated Access Without a LoginSeptember 3, 20266 mins
Vulnerabilities PaperCut Zero-Days Have Moved Past Scanning — Attackers Are Now Stealing DataSeptember 3, 20266 mins
Vulnerabilities 22,000 Microsoft Exchange Servers Are Still Exposed — And the Exploit Is PublicSeptember 3, 20266 mins
Vulnerabilities GitSpawn: A Malicious Repository Can Make Your AI Coding Agent Run Attacker CodeSeptember 3, 2026September 3, 20267 mins
Vulnerabilities Chrome Just Patched 26 Bugs — Two of Them Are Critical Memory CorruptionSeptember 2, 2026September 2, 20264 mins
Vulnerabilities Rockwell PLCs Can Be Knocked Offline With One Malformed Network PacketSeptember 2, 20264 mins
Vulnerabilities Dropbox Let Hackers In Without the Password — Lenovo ID Was EnoughSeptember 2, 2026September 2, 20264 mins
Vulnerabilities AI Agents Just Compressed a Two-Week Ransomware Attack Into 10 HoursSeptember 2, 2026September 2, 20265 mins
Vulnerabilities SonicWall Hit Again: Two New SMA1000 Zero-Days Are Already Under AttackSeptember 2, 2026September 2, 20267 mins
Vulnerabilities MLflow SSRF Is Stealing Cloud Credentials — and Today Is the CISA DeadlineSeptember 2, 2026September 2, 20268 mins
Vulnerabilities OpenAI Says Astra Has Reached “Critical” Cyber Capability — and That Changes the RulesSeptember 2, 2026September 2, 20268 mins
Vulnerabilities 13 Poisoned Packagist Themes Turn Websites Into iPhone Spyware TrapsSeptember 2, 2026September 2, 20269 mins
Vulnerabilities FBI Probes Dark Web Service Selling 153 Million Driver’s License ScansSeptember 2, 20268 mins
Vulnerabilities AI Just Helped Turn One PLC Exploit Into Another — and It Took Less Than $600September 1, 20268 mins
Vulnerabilities Glassdoor Gets 172 Hours Before Ransomware Gang Threatens to Dump Its DataSeptember 1, 20266 mins
Vulnerabilities JFrog Artifactory Authentication Bypass Is Being Exploited in the WildSeptember 1, 20267 mins
Vulnerabilities Iranian Hackers Turn Fake Coding Tests Into Cross-Platform RAT Delivery SystemSeptember 1, 2026September 1, 20267 mins
Vulnerabilities Hackers Stole an AI API Key and Burned $600,000 in Compute CreditsSeptember 1, 2026September 1, 20268 mins
Vulnerabilities Malicious PHP Packages Are Being Used to Push iPhone SpywareSeptember 1, 2026September 1, 20266 mins
Vulnerabilities 19 Browser Extensions Turned Into Data-Stealing Malware After Developers Sold ThemSeptember 1, 2026September 1, 20266 mins
Vulnerabilities JetBrains Cadence Breach Exposed Developer Data, AWS Credentials and Source CodeSeptember 1, 20267 mins
Vulnerabilities Fake Claude Opus 5 for Windows Is Actually a RevStealer TrapSeptember 1, 2026September 1, 20266 mins
Vulnerabilities Tectonic Lost $73 Million After Attackers Turned a Token Into Fake CollateralSeptember 1, 20267 mins
Vulnerabilities BGP Hijack Turned Virtualizor Updates Into a Supply-Chain AttackSeptember 1, 20267 mins
Vulnerabilities 21,899 Exchange Servers Are Still Exposed to a Mailbox Hijack BugSeptember 1, 2026September 1, 20266 mins
Vulnerabilities Langflow RCE Is Being Exploited to Steal AI and Cloud CredentialsSeptember 1, 20266 mins
