CVE-2026-61500 is a critical authentication bypass in Rejetto HTTP File Server, discovered by Anthropic Mythos AI and exploited within 24 hours of public disclosure by a China-linked actor targeting ...
GlassWorm hides malware in VS Code theme extensions, targeting developers through Visual Studio Marketplace and Open VSX.
A group of VS Code theme extensions linked to GlassWorm, a malware campaign targeting developers. Their investigation ...
TIKTOUK targets exposed WordPress backups to steal cloud and email credentials, with 50,000 credentials found across 37,000 domains.
Attackers exploited two PaperCut zero-day vulnerabilities to deploy AdaptixC2 malware and compromise an education organization’s ...
Webflow is a service that allows you to build websites visually. However, as you build, you may find yourself wanting to ...
SlowMist confirms an active iOS exploit that steals crypto private keys via Safari, affecting iPhones running iOS 13 through 26.5.
Cough syrup, sexual enhancement products, vaporisers and etomidate pods worth more than S$54,000 were seized during joint ...
Worker move goods for despatch in a redistribution centre of US online retail giant Amazon in Horn-Bad Meinberg, western Germany, on December 9, 2024. INA FASSBENDER/AFP via Getty Images Cloudflare's ...
Chrome is rolling out an update for its desktop browser. The update includes 230 security fixes, one of which is known to be actively exploited. The stable channel has been updated to ...
This photograph shows a view of Microsoft's logo on the company's French headquarters in Issy-les-Moulineaux on the outskirts of Paris on January 6, 2025. Martin LELIEVRE/AFP via Getty Images A ...
A massive malvertising campaign is using fake Solana, Luno, and TradingView webpages with malicious JavaScript that instructs browsers to assemble malware directly in memory. The operation has been ...