Cybersecurity

A maximum-severity command injection flaw (CVE-2026-16812, CVSS 10.0) in on-premises Arista VeloCloud Orchestrator (VCO) is under active exploitation.CISA has added the vulnerability to its...

The Dysphoria IoT botnet, tracked by CNCERT and XLab, now uses Ethereum Name Service (ENS) and Solana Name Service (SNS) for resilient command-and-control, making...

n8n fixed a high-severity sandbox escape (CVSS 8.7) in versions 2.31.5 and 2.32.1 that could allow authenticated workflow editors to execute OS commands on...

A previously undocumented East Asian threat actor is targeting Middle East government agencies with three new malware families: TELESHIM, MIXEDKEY, and BINDCLOAK.The TELESHIM backdoor...

SourTrade malvertising campaign targets cryptocurrency investors by assembling malware inside the victim's browser using a legitimate Bun runtime.It operates since late 2024, impersonating TradingView,...

A critical remote code execution vulnerability (CVE-2026-16723, CVSS 9.0) affects Alibaba's Fastjson library versions 1.2.68 through 1.2.83 when used in Spring Boot applications.Security firms...

North Korean threat actor BlueNoroff is running ClickFix-style campaigns using typosquatted Zoom and Microsoft Teams domains.The group operates an active phishing kit designed to...

Researchers at Accomplish AI discovered a sandbox escape vulnerability in Anthropic's Claude Cowork, affecting approximately 500,000 macOS users.The flaw, named SharedRoot, allowed an agent...