HTTP/2 Bomb Vulnerability: Small Requests, Big Denial-of-Service ImpactSecurity researchers have disclosed a new remote denial-of-service technique called HTTP/2 Bomb, affecting major web servers and infrastructure components including NGINX, Apache HTTPD, Microsoft IIS…
Unpatched Windows Search URI Issue Can Leak NTLMv2 HashesSecurity researchers have disclosed an unpatched Windows Search URI issue that could allow attackers to steal a …
Acer Wave 7 Router Zero-Days: When the Network Gateway Becomes the Weak LinkAcer has warned about two maximum-severity vulnerabilities affecting its Wave 7 routers runni…
## One-Click GitHub.dev Attack Shows Why Developer Tools Are High-Value TargetsA newly disclosed vulnerability in GitHub.dev and VS Code’s web-based environment shows ho…
## CISA Warns of Active Exploitation of Android and Linux VulnerabilitiesCISA has warned that attackers are actively exploiting two vulnera…
## WordPress Malware Campaign Hides Payloads in Steam ProfilesA new malware campaign has infected nearly 2,000 WordPress websites by hiding…
Meta AI Support Bot Abuse: When Account Recovery Becomes the Attack PathHackers reportedly abused Meta’s AI-powered support assistant to ta…
## Hackers Hijack Thousands of Sites for ClickFix and FakeUpdate Attacks: Trust Is Being Weaponized AgainA new report covered by BleepingCo…
Dashlane Brute-Force Attack: A Reminder That Identity Is Now the Front DoorDashlane has disclosed that some user accounts were targeted in …
The active exploitation of Palo Alto Networks GlobalProtect CVE-2026-0257 is a serious reminder that VPN gateways remain one of the most at…
The SANS ISC diary on an unidentified RAT pushing NetSupport RAT is a good reminder that ClickFix campaigns are becoming a reliable malware…
The active exploitation of the WP Maps Pro vulnerability is another reminder that WordPress plugins can become full site-takeover paths whe…
The CIFSwitch Linux vulnerability is a serious reminder that local privilege escalation bugs can be just as dangerous as remote exploits on…
The abuse of ChatGPT share links to host fake outage pages is a reminder that attackers will exploit user trust in legitimate platforms, no…
The California Attorney General’s lawsuit against 23andMe is a reminder that genetic-data breaches are in a completely different category f…