Cybersecurity

Threat actors are actively exploiting CVE-2026-27540, a critical arbitrary file upload flaw in the WooCommerce Wholesale Lead Capture plugin with 6,000+ active installs.Wordfence has...

A skilled human attacker exploited a critical Marimo vulnerability (CVE-2026-39987) to pivot from a vulnerable notebook to an SSH bastion host in just...

A critical vulnerability in LiteSpeed Web Server Enterprise could allow low-privilege users to gain root access on shared-hosting servers.cPanel urged administrators to update to...

An attacker infiltrated 3BB, a major Thai broadband provider, using the legitimate remote management tool MeshCentral as a hidden backdoor.The attacker targeted 3BB's RADIUS...

Cybersecurity stocks surged Monday after stark warnings from AI executives shifted focus to AI-driven attack risks.CrowdStrike (CRWD) led the rally with a 12% gain...

Russian state-sponsored group GTG-20006 (Midnight Blizzard) abused Anthropic's Claude AI to automate malware rebuilding and evade security defenses.The AI-driven workflow enabled automatic detection of...

Malicious actors are abusing Google Play's Early Access program to distribute deceptive apps with no public reviews or ratings.A fake Grand Theft Auto game...

U.S. authorities seized Telegram channels and froze $52.8 million in cryptocurrency linked to Xinbi Guarantee, a marketplace serving Southeast Asian scam centers.The coordinated action...