Cybersecurity

North Korean hackers are using a fake macOS update screen to trick users into running malicious Terminal commands.The campaign employs blockchain-hosted command-and-control (C2) via...

Security researchers at Wiz discovered a vulnerability in Azure Cosmos DB that could have allowed an attacker to gain full read and write access...

Hidden instructions in Word documents can make Microsoft 365 Copilot rewrite financial figures and copy the same payload into the finished file, according to...

The FCC added foreign-produced mobile robots and networked power inverters to its Covered List on July 28, blocking new models from import, marketing, or...

Ruby on Rails patched a critical Active Storage vulnerability, CVE-2026-66066 (CVSS 9.5), allowing unauthenticated file read on servers using libvips.Attackers can extract secret_key_base, database...

A maximum-severity vulnerability (CVE-2026-59726, CVSS 10.0) in the open-source AI agent platform Ruflo allows unauthenticated remote code execution.The flaw, codenamed RufRoot, exploits an unauthenticated...

Critical Firefox JIT flaw (CVE-2026-10702) enables remote code execution via a malicious webpage, patched in Firefox 151.0.3.The vulnerability also compromises Tor Browser, with no...

Two beta npm packages from @joyfill were compromised to deliver the DEV#POPPER remote access trojan, using a multi-blockchain resolver structure.The malware retrieves encrypted commands...