Cybersecurity

North Korean-linked threat actors, known as Contagious Interview, have expanded their PolinRider supply-chain campaign to 108 malicious packages and browser extensions.The campaign actively compromises...

Seven vulnerabilities (CVE-2026-6682 to CVE-2026- 6688) were found in the widely used FatFs filesystem library, with three rated as High severity.The flaws, disclosed on July...

A critical Linux kernel flaw, Bad Epoll (CVE-2026-46242), allows a standard user to gain full root control on desktops, servers, and Android.The exploit leverages...

A new macOS malware, PamStealer, is actively targeting cryptocurrency users by stealing wallet data and system passwords.It spreads via a fake website impersonating the...

Google and law enforcement have degraded the NetNut proxy network, shrinking its pool of residential devices by millions.The network, which sells access to home...

Credential theft campaign FortiBleed is now linked to INC and Lynx ransomware operations, with stolen data used for follow-on attacks.Threat actors targeted ~11,250 FortiGate...

The U.S. CISA has flagged a high-severity Microsoft SharePoint flaw, CVE-2026-45659, as actively exploited, demanding federal agency patches by July 4, 2026.This remote code...

An unpatched flaw in Argo CD's repo-server component allows for unauthenticated remote code execution and potential full Kubernetes cluster takeover.Disclosed by Synacktiv after 18...