Cybersecurity

CISA added three actively exploited vulnerabilities to its KEV catalog on August 5, 2026Critical Langflow code injection flaw (CVE-2026-9198, CVSS 9.8) enables unauthenticated remote...

Pillar Security discovered a prompt-injection attack that could trick Google's ADK triage agent into triggering a privileged code-fixing workflow.By exploiting a public GitHub issue,...

An unknown Chinese threat actor is targeting iOS devices using a publicly leaked version of the DarkSword exploit kit.Over 100 malicious web properties, mostly...

Three high-severity vulnerabilities, collectively named FaceHugger, were disclosed in Hugging Face's Diffusers library, allowing arbitrary code execution on machines that load crafted model repositories.The...

An attacker swept 1,082.65 BTC (~$70.2 million) from 1,196 Bitcoin addresses in 41 minutes by exploiting a predictable random number generator flaw in Coldcard...

Attackers modified Adform’s JavaScript file to rewrite Bitcoin, Ethereum, and Tron wallet addresses on July 27, 2026.The malicious code replaced addresses both via clipboard...

A Chinese-speaking threat actor has targeted government organizations in Central Asia and Syria since January 2025, using two new backdoors.Kaspersky researchers identified the malware...

Google fixed 1,072 security bugs in Chrome versions 149 and 150, surpassing the total from the prior 23 milestones combined.A critical sandbox escape vulnerability...