Cybersecurity

INTERPOL’s Op Serengeti III: 1,462 Arrested, $105M Recovered

Operation Serengeti III disrupted 10,909 malicious networks and recovered more than $105 million in illicit funds.Authorities from 21 countries arrested 1,462 suspects and identified...

Remote attacker crashes HTTP/3 servers with single request

FoxIO disclosed a denial-of-service flaw in HTTP/3 servers that allows unauthenticated attackers to crash them with a single connection.The vulnerability lies in QPACK header...

GitLab fixes critical 10.0 RCE flaw; all versions since 7.0

GitLab released fixes for a critical vulnerability (CVE-2026-110264) that allows unauthenticated remote code execution on self-managed servers, affecting every version since 7.0.The flaw, rated...

Grayscale Allows Crypto Swaps, Citing Cybersecurity Threats

Grayscale now allows eligible investors to swap crypto directly for shares of 10 select funds via in-kind transfers, bypassing the need to sell for...

Bronze Sandcastle uses Sandboxie DLL sideloading in Asia attacks

Researchers have identified a China-aligned threat cluster named Bronze Sandcastle targeting organizations in Asia and Africa since mid-2025.The group exclusively uses Sandboxie DLL sideloading,...

PHP ships urgent security patch for two critical RCE flaws

PHP will release emergency patches for two critical remote code execution vulnerabilities rated 9.2 on the CVSS v4.0 scale.The flaws, dubbed php2shell by researchers,...

FortiSIEM Critical Path Traversal Flaw Now Has PoC Exploit

Critical path traversal vulnerability CVE-2026-106173 in Fortinet FortiSIEM carries a CVSS score of 9.4 and can be exploited remotely without authentication.Horizon3.ai has released a...

Plex Media Server Vulnerabilities Exploited for Miners

Threat actors are exploiting a chain of four vulnerabilities in Plex Media Server, dubbed Plex2Shell, to deploy cryptocurrency miners and reverse proxy software.A public...

Latest news

Bitcoin ETFs rebound $110M, but October outflows hit $202M

US spot Bitcoin ETFs saw $110 million in net inflows on Monday, bouncing back from $774 million in withdrawals...

Keystone says stolen key could allow counterfeit wallets

Attacker stole Keystone's device-authentication key, enabling counterfeit wallets to pass checks.Keystone will destroy 18,835 inventory devices and suspend shipments...

Canada proposes stablecoin rules with 1:1 reserves, 3-day redemption

Canada's draft stablecoin regulations, published October 24, open a 60-day comment period, with the rules targeted to take effect...