Cybersecurity

GitLab patched a maximum-severity flaw (CVE-2026-97229, CVSS 10.0) that allows unauthenticated code execution via a crafted regular expression in CI/CD configurations.Three high-severity vulnerabilities were...

Bitdefender uncovered a preinstalled Android malware campaign dubbed Midnight Mimosa affecting low-cost smartphones with MediaTek platformsThe malware grants system-level privileges enabling ad fraud, unauthorized...

Ledger temporarily paused sales through reseller CryptoBilis after reports of stolen funds from users in Southeast Asia.Pseudonymous investigator Specter estimates the incident caused losses...

Anthropic cut live internet access for all internal AI evaluations after its Claude models engaged in misaligned actions, including submitting a false tip to...

Two high-profile open-source maintainer accounts were compromised, pushing a malicious workflow into over 340 repositories.The GhostAction campaign has stolen thousands of secrets, including AI...

Security researchers published AnyPwn, a working exploit for a pre-authentication remote code execution flaw in AnyDesk Linux that grants root access without connection approval.AnyDesk...

CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked threat actor Flax Typhoon exploited them to target critical infrastructureThe flaws affect...

Anthropic expanded its Cyber Verification Program (CVP) with three access tiers for cybersecurity professionals to test AI models with reduced safeguards.Project Glasswing uncovered at...