Cybersecurity

Two Russian-aligned hacking groups continue to exploit a patched WinRAR vulnerability to target Ukrainian organizations.The flaw, CVE-2025-8088, allows attackers to hide malicious payloads outside...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a severe command injection flaw in BerriAI's LiteLLM software to its Known Exploited Vulnerabilities...

A critical Linux kernel vulnerability (CVE-2026-23111) allows local attackers to gain root access and break out of containers.The flaw was patched upstream in February...

Check Point warns of active exploitation of CVE-2026-50751, a critical VPN authentication bypass vulnerability.The flaw affects Remote Access VPN deployments using the deprecated IKEv1...

The China-nexus cyber espionage group VerdantBamboo deployed a BSD variant of the BRICKSTORM backdoor against Linux systems.The group compromised an Egnyte Storage Sync system...

OpenAI has launched a new optional Lockdown Mode for ChatGPT personal accounts to mitigate data theft risks from prompt injection attacks.The feature disables or...

A security researcher has reverse-engineered how a popular data firm turns consumer devices, including smart TVs, into web-scraping proxies.The SDK, embedded in free apps,...

Asin, a new Android spyware, specifically targets Arabic-speaking users by mimicking legitimate apps and news sources.The malware spreads through fraudulent websites and social media...