Cybersecurity

Threat actors are actively exploiting a critical Microsoft SharePoint vulnerability (CVE-2026-55040, CVSS 9.1) after a proof-of-concept code was released by Rapid7.The flaw allows unauthenticated...

737 malicious Chrome extensions, impersonating 66 VPN brands like NordVPN and Proton VPN, routed Russian users' browser traffic through a single SOCKS5 proxy infrastructure.Over...

Cisco has confirmed active exploitation of a high-severity vulnerability (CVE-2026-20349) in its Secure Firewall ASA and FTD Software.The flaw allows an unauthenticated, remote attacker...

Microsoft’s August 2026 Patch Tuesday fixes an actively exploited zero-day (CVE-2026-68820) in the Windows kernel driver, used by Lazarus Group in Operation Dream Job.Four...

Researchers posed as a crypto startup and hired three suspected North Korean operatives to study their methods.All three used AI-generated or altered IDs, with...

AI can increase development output by 10 to 50 times, making security review the bottleneck.Traditional CVE-driven remediation may break down when software is built...

North Korea's Kimsuky hacking group is now running AI models offline on its own servers, moving beyond public chatbots to build AI into its...

Malicious VS Code extension "Solidity Pro" steals browser crypto wallets and credentials Captures seed phrases, GitHub tokens, AWS keys, OpenAI keys, and SSH private keys Uses...