Cybersecurity

The Dysphoria IoT botnet, tracked by CNCERT and XLab, now uses Ethereum Name Service (ENS) and Solana Name Service (SNS) for resilient command-and-control, making...

n8n fixed a high-severity sandbox escape (CVSS 8.7) in versions 2.31.5 and 2.32.1 that could allow authenticated workflow editors to execute OS commands on...

A previously undocumented East Asian threat actor is targeting Middle East government agencies with three new malware families: TELESHIM, MIXEDKEY, and BINDCLOAK.The TELESHIM backdoor...

SourTrade malvertising campaign targets cryptocurrency investors by assembling malware inside the victim's browser using a legitimate Bun runtime.It operates since late 2024, impersonating TradingView,...

A critical remote code execution vulnerability (CVE-2026-16723, CVSS 9.0) affects Alibaba's Fastjson library versions 1.2.68 through 1.2.83 when used in Spring Boot applications.Security firms...

North Korean threat actor BlueNoroff is running ClickFix-style campaigns using typosquatted Zoom and Microsoft Teams domains.The group operates an active phishing kit designed to...

Researchers at Accomplish AI discovered a sandbox escape vulnerability in Anthropic's Claude Cowork, affecting approximately 500,000 macOS users.The flaw, named SharedRoot, allowed an agent...

Security researchers at Qualys disclosed a high-severity local privilege escalation flaw (CVE-2026-8933) in snap-confine, affecting default Ubuntu Desktop installations.An unprivileged attacker can exploit two...