Cybersecurity

Critical MLflow and FUXA flaws exploited in wild

Two critical vulnerabilities in MLflow (CVE-2026-64849, CVSS 9.3) and FUXA (CVE-2026-25895, CVSS 9.5) are under active exploitation.Attackers are exploiting the MLflow flaw to reach...

City Forum campaign steals data via Salesforce, ServiceNow guest access

A single server (158.220.87.87) has been systematically extracting data from Salesforce and ServiceNow customer portals for over a year, using a purpose-built Go program.Named...

StubMaker: 16 typosquat RubyGems packages steal data

Cybersecurity researchers have discovered a new typosquatting campaign, tracked as StubMaker, targeting RubyGems users with a Windows-based information stealer.The 16 malicious gem packages were...

SharePoint CVE-2026-55040 exploited after PoC release

Threat actors are actively exploiting a critical Microsoft SharePoint vulnerability (CVE-2026-55040, CVSS 9.1) after a proof-of-concept code was released by Rapid7.The flaw allows unauthenticated...

Chrome Store Hit: 737 Fake VPN Extensions Target Russian Users

737 malicious Chrome extensions, impersonating 66 VPN brands like NordVPN and Proton VPN, routed Russian users' browser traffic through a single SOCKS5 proxy infrastructure.Over...

Cisco Firewall Flaw Actively Exploited in the Wild

Cisco has confirmed active exploitation of a high-severity vulnerability (CVE-2026-20349) in its Secure Firewall ASA and FTD Software.The flaw allows an unauthenticated, remote attacker...

Aug Patch Tuesday: Zero-day exploited, 4 critical RCEs

Microsoft’s August 2026 Patch Tuesday fixes an actively exploited zero-day (CVE-2026-68820) in the Windows kernel driver, used by Lazarus Group in Operation Dream Job.Four...

Researchers Lure North Korean IT Workers via Fake Crypto Firm

Researchers posed as a crypto startup and hired three suspected North Korean operatives to study their methods.All three used AI-generated or altered IDs, with...

Latest news

Visa, Dunamu partner for stablecoin payments and AI commerce

VISA and Dunamu (parent of exchange Upbit) formed a strategic partnership to explore stablecoin payments, cross-border remittances, and AI-powered...

Nvidia’s Q2 report: AI chip demand surges, defying critics

NVIDIA stock surged nearly 9% on Thursday after reporting record second-quarter revenue of $96.2 billion, more than double year-over-year.President...

First quantum-safe Bitcoin transaction mined on mainnet

First quantum-safe Bitcoin transaction mined on Bitcoin mainnet.Method uses hash-based security without changing Bitcoin's consensus rules.StarkWare still favors soft...