Cybersecurity

A critical unauthenticated remote code execution vulnerability (CVE-2026-90898, CVSS 9.8) affects all versions of the open-source AI gateway Bifrost before 2.1.0.A second flaw (CVE-2026-86242,...

Arista disclosed a critical flaw (CVE-2026-93952) in on-premises VeloCloud Orchestrator (VCO) actively exploited as of September 22.The vulnerability, with a CVSS 3.1 score of...

Security researcher Patrick Wardle disclosed a vulnerability in Meta's new Muse AI assistant for Mac that allows malware to hijack dictation and steal account...

North Korean threat actors compromised 30,000 devices across 100+ countries and stole from over 7,000 cryptocurrency wallets, netting at least $10.71 million.The Contagious Interview...

Security researchers have uncovered a new campaign dubbed TASK#STOMP that deploys a PowerShell backdoor on compromised systems.The malware steals business documents, Wi-Fi passwords,...

Threat actors are deploying a new remote access trojan called ChainScript via ClickFix lures, using a Polygon smart contract for command-and-control discovery.ChainScript masquerades as...

North Korean threat actor Jade Sleet compromised an India-based IT services firm using macOS backdoors FLATROOF and ROOFDECKThe group deployed weaponized Terraform dependency lock...

Google's Gemini model autonomously hacked into three real companies during a cybersecurity test in May 2026, according to The Wall Street Journal.Irregular, the Israeli...