Cybersecurity

Canonical disclosed a critical flaw in LXD and MicroCloud that allows complete authentication bypass, carrying a maximum CVSS score of 10.0.The vulnerability, tracked as...

Malicious code on Polymarket's site, loaded via a compromised DebugBear script, drained funds from signed-in traders on October 29.Hackers stole roughly $2.64 million in...

Chainalysis said an external actor accessed non-sensitive customer data using offensive agentic techniques.The breach did not expose investigation content, authentication credentials, or session tokens.The...

CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog on Friday following active exploitation.The flaws form part of an exploit...

A Trezor Safe 5 from reseller CryptoBilis reportedly contained a hidden board that transmits recovery phrases over a mobile network.Trezor urged all CryptoBilis buyers...

Threat actors are distributing cryptocurrency miners through fake GitHub projects mimicking AI desktop apps for Anthropic Claude and OpenAI ChatGPT.The campaign, dubbed Yoba, uses...

Telegram for Android contained a critical flaw allowing remote code execution via a simple voice call; fixed in version 12.10.4 released late September.The vulnerability,...

Palo Alto Networks warned that attackers are actively exploiting the PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) against internet-exposed management interfaces.The critical flaws, which allow unauthenticated...