Cybersecurity

MI5 issued an unprecedented alert warning over 100 U.K.-linked academics contributed to research funded by China's Ministry of State Security through the front company...

GitLab disclosed a critical vulnerability, CVE-2026-90970, in its AI Gateway with a CVSS score of 9.9.The flaw could allow a logged-in user with Duo...

Google restricts Android’s accessibility services to verified apps when Advanced Protection is enabled, closing a major attack pathway.Malicious apps have abused the AccessibilityService API...

Security researchers have uncovered a WordPress malware codenamed SC that uses the Ethereum blockchain for command-and-control communication, making removal extremely difficult.The backdoor is a...

OpenSSL's CVE-2026-84782 DTLS flaw can leak heap memory across a connection or crash programs.Fixes are public for OpenSSL 4.0.3, 3.6.5, 3.5.9, and 3.4.8; older...

Academics disclosed a new Spectre-v2 CPU vulnerability variant, Branch Target Reuse (BTR), affecting JIT engines across multiple CPU vendors.The attack exploits the interplay between...

High-severity OAuth credential theft flaw found in MCP Python SDK versions 1.9.1–1.29.1 and 2.0.0–2.1.1.Attacker-controlled MCP server can trick client into sending client secret, authorization...

Microsoft's Storm-3168 used AI orchestration and compromised service principals to launch a destructive ransomware attack on Azure, demanding Bitcoin payment.The attack deleted storage accounts,...