Cybersecurity

Adobe patched CVE-2026-75650 (CVSS 10.0), a zero-day in Commerce and Magento Open Source exploited since September 4, 2026.The "StyleSmuggler" flaw enables unauthenticated remote code...

Researchers at SOCRadar uncovered a Chrome/Edge post-exploitation toolkit called PEEP that masquerades as a "Smart Bookmarks" extension.The malware bypasses Web Store checks by forging...

Cybersecurity researchers have unveiled JSCeal, a sophisticated compiled V8 JavaScript malware used to steal credentials and intercept traffic.A related malvertising campaign named SourTrade delivers...

Attackers are exploiting a critical vulnerability in MikroTik RouterOS that grants full administrative control via SSH without authentication.Successful attacks have been observed since at...

JetBrains urges Cadence users to immediately revoke and rotate all credentials after attackers exploited a critical TeamCity vulnerability (CVE-2026-63077) to breach its environment.The intrusion...

Microsoft has identified a high-volume phishing campaign using invisible Unicode tag characters to bypass email security filters.Dubbed "ASCII Smuggling," the technique conceals financial lure...

Google patched 12 Chrome vulnerabilities on September 4, 2026, including one actively exploited zero-day.The high-severity flaw, CVE-2026-85046, is a type confusion bug in the...

Threat actors are abusing the trusted, signed Node.js runtime to deploy malicious payloads, evading signature-based detection.Campaigns since February 2026 have targeted government departments, technology...