Cybersecurity

Cybersecurity researchers Talal Haj Bakry and Tommy Mysk disclosed a WebKit vulnerability that bypasses Apple's iCloud Private Relay.Three specific features in WebKit—DNS prefetching, WebAuthn,...

Maksim Silnikau, a Belarusian national, was sentenced to 16 years in prison for running the Ransom Cartel ransomware-as-a-service operation.The scheme targeted at least 18...

A macOS ClickFix campaign uses over 250 front-end domains to deliver information-stealing malware to targeted users.The attack employs a server-side fingerprinting gate that hides...

CISA added three actively exploited vulnerabilities to its KEV catalog on August 5, 2026Critical Langflow code injection flaw (CVE-2026-9198, CVSS 9.8) enables unauthenticated remote...

Pillar Security discovered a prompt-injection attack that could trick Google's ADK triage agent into triggering a privileged code-fixing workflow.By exploiting a public GitHub issue,...

An unknown Chinese threat actor is targeting iOS devices using a publicly leaked version of the DarkSword exploit kit.Over 100 malicious web properties, mostly...

Three high-severity vulnerabilities, collectively named FaceHugger, were disclosed in Hugging Face's Diffusers library, allowing arbitrary code execution on machines that load crafted model repositories.The...

An attacker swept 1,082.65 BTC (~$70.2 million) from 1,196 Bitcoin addresses in 41 minutes by exploiting a predictable random number generator flaw in Coldcard...