Most recent articles by:

Deep Shah

Deep is the Co-founder at Codezeros Technology. His strong business acumen and industry knowledge in the Blockchain industry make him one of the strongest pillars at Codezeros. He comes with a rich technological and business understanding to lead. His deep understanding of Blockchain technology integration is a key component of our success at Codezeros. He also contributes to the overall vision of the company's growth and development.

LLM Agent Exploits Marimo Vulnerability, Steals Database

A threat actor used an LLM agent to automate post-exploitation actions after breaching a public-facing Marimo notebook via the critical CVE-2026-39987 vulnerability.The automated agent...

Critical RCE Flaw Found in Gogs Git Service

A critical, unpatched security flaw in the open-source Git service Gogs allows authenticated users to execute arbitrary code on the server.The vulnerability, rated 9.4...

Microsoft Urges Coordinated Disclosure After Zero-Day Flap

Microsoft advocates for Coordinated Vulnerability Disclosure (CVD) following the uncoordinated public release of multiple Windows zero-days.A researcher disclosed six high-severity vulnerabilities, including three already...

Cryptocriminal JINX-0164 Targets Macs in Sophisticated Supply Chain Heist

A new financially motivated threat actor, tracked as JINX-0164, is actively targeting cryptocurrency organizations with sophisticated social engineering and custom macOS malware.The campaign uses...

New npm Malware Steals Claude AI User Data

A new malicious npm package, "mouse5212-super-formatter," steals files from the Claude AI tool's dedicated upload directory.The malware uploads stolen data to a threat actor-controlled...

GlassWorm Botnet Disrupted After Targeting Devs

Major cybersecurity firms CrowdStrike, Google, and Shadowserver Foundation disrupted a persistent developer-targeting botnet named GlassWorm on May 27, 2026.The botnet used trojanized VS Code...

India’s CERT Issues 12-Hour Patch Order

The Indian Computer Emergency Response Team (CERT-In) mandates a 12-hour patch deadline for critical vulnerabilities where feasible.The directive responds to threat actors increasingly using...

Digital Knowledge LMS Zero-Day Deploys Malware

A critical vulnerability (CVE-2026-5426) in the Japanese LMS Digital Knowledge KnowledgeDeliver allowed unauthenticated remote code execution.Attackers exploited this flaw as a zero-day to deploy...

Must read