Cybersecurity
News
CISA Adds 4 Actively Exploited Flaws to KEV Catalog
CISA added four critical vulnerabilities to its Known Exploited Vulnerabilities catalog, including flaws in Apple macOS, Microsoft SharePoint, VMware vCenter, and Microsoft IKE.The Apple...
News
Critical MLflow and FUXA flaws exploited in wild
Two critical vulnerabilities in MLflow (CVE-2026-64849, CVSS 9.3) and FUXA (CVE-2026-25895, CVSS 9.5) are under active exploitation.Attackers are exploiting the MLflow flaw to reach...
News
City Forum campaign steals data via Salesforce, ServiceNow guest access
A single server (158.220.87.87) has been systematically extracting data from Salesforce and ServiceNow customer portals for over a year, using a purpose-built Go program.Named...
News
StubMaker: 16 typosquat RubyGems packages steal data
Cybersecurity researchers have discovered a new typosquatting campaign, tracked as StubMaker, targeting RubyGems users with a Windows-based information stealer.The 16 malicious gem packages were...
News
SharePoint CVE-2026-55040 exploited after PoC release
Threat actors are actively exploiting a critical Microsoft SharePoint vulnerability (CVE-2026-55040, CVSS 9.1) after a proof-of-concept code was released by Rapid7.The flaw allows unauthenticated...
News
Chrome Store Hit: 737 Fake VPN Extensions Target Russian Users
737 malicious Chrome extensions, impersonating 66 VPN brands like NordVPN and Proton VPN, routed Russian users' browser traffic through a single SOCKS5 proxy infrastructure.Over...
News
Cisco Firewall Flaw Actively Exploited in the Wild
Cisco has confirmed active exploitation of a high-severity vulnerability (CVE-2026-20349) in its Secure Firewall ASA and FTD Software.The flaw allows an unauthenticated, remote attacker...
News
Aug Patch Tuesday: Zero-day exploited, 4 critical RCEs
Microsoft’s August 2026 Patch Tuesday fixes an actively exploited zero-day (CVE-2026-68820) in the Windows kernel driver, used by Lazarus Group in Operation Dream Job.Four...
Latest news
Meta tests robots for data centers, sparking job fears
Meta is testing robots to swap cables, restart servers, and inspect equipment in its data centers.One employee estimated a...
SEC and CFTC vacancies stall crypto Clarity Act push
The SEC and CFTC face severe leadership vacancies as the Senate considers the Clarity Act, which would define jurisdiction...
Circle USDC to sponsor Chelsea FC jerseys despite FCA warning
Circle, issuer of USDC stablecoin, will sponsor Chelsea Football Club jerseys for the 2026/2027 season.The deal follows a warning...
