Cybersecurity

PortSwigger researcher Gareth Heyes presented CSS-based email attacks at Black Hat USA 2026 on August 8.The attacks exploited HTML and CSS techniques in Outlook,...

ClickFix-style attacks are delivering Go-based malware on macOS that steals cryptocurrency wallet funds, browser passwords, and iCloud Keychain data.The malware includes a "DRAIN" routine...

CVE-2026-64564 (SCTPhantom) is a use-after-free bug in Linux's SCTP networking code that can escalate to full root access and container escape.The flaw has existed...

PortSwigger's AI system, HTTP Terminator, autonomously generated and validated novel HTTP desynchronization attacks after exploring 30,000 candidate vectors.The research identified roughly 700 vulnerable targets...

Cisco disclosed multiple critical vulnerabilities in Catalyst SD-WAN and IOS XE Software, discovered during internal security testing using frontier AI models.The flaws include improper...

Cybersecurity researchers Talal Haj Bakry and Tommy Mysk disclosed a WebKit vulnerability that bypasses Apple's iCloud Private Relay.Three specific features in WebKit—DNS prefetching, WebAuthn,...

Maksim Silnikau, a Belarusian national, was sentenced to 16 years in prison for running the Ransom Cartel ransomware-as-a-service operation.The scheme targeted at least 18...

A macOS ClickFix campaign uses over 250 front-end domains to deliver information-stealing malware to targeted users.The attack employs a server-side fingerprinting gate that hides...