Halloween has come and gone, but businesses that depend on connected systems are still feeling spooked. In the space of a few weeks, a popular cloud hosting platform was breached, a critical flaw surfaced in the language that powers much…
NIKKE PC game launcher hacked to spread remote access, data-stealing malware CISA flags WordPress RCE flaw as actively exploited in attacks Hackers use n-day exploits in zero-click attacks on iOS, Android devices Vercel rolls out new protection against stolen session…
CISA flags WordPress RCE flaw as actively exploited in attacks Hackers use n-day exploits in zero-click attacks on iOS, Android devices Vercel rolls out new protection against stolen session cookie attacks Zyxel fixes zero-day exploited to hack nearly 1,000 network switches…
Three medium Plex bugs handed attackers the admin access a fourth, high severity flaw needed. Live exploitation followed the exploit by a day. Exploit code went live on a Friday. By Saturday morning, attackers were already inside Plex Media Servers,…
Check Point reported on 3 November that a Codex jailbreak toolkit called Haiou persists by rewriting the agent's own instruction files to push ads for a third-party gateway. Adversa's roundup of 2 November shows the same pattern elsewhere: config and instruction files…
A Fiverr buyer messaged me just after midnight. He needed "a senior developer with AI and web experience" to fix the invoice generation in an AI invoice app that another freelancer had built. The project looked normal. But one line…
A vulnerability in the APT package manager lets attackers intercept communications between Linux systems and package repositories, install malicious packages, and execute code with root privileges. This flaw, tracked as CVE-2026-109518, affects Debian, Ubuntu, and their derivative distributions under certain…
The findings, detailed in ESET’s “Gorbag: Orcs at the border” research presented at Virus Bulletin 2026, connect previously reported GIFTEDCROOK tooling with a broader espionage operation. In early 2026, the operators shifted to weaponized RAR attachments exploiting CVE-2025-8088. The path traversal flaw…
AI agents help Joe Sandbox uncover malicious behavior concealed by evasion techniques and unmet execution conditions. Joe Security‘s Adaptive Detonation brings active intervention to malware analysis, helping security teams investigate threats that may conceal their behavior during an initial…
Ivanti lists 3 vulnerabilities, all exploited together in the wild, and says exploitation affected "a limited number of customers at the time of disclosure" when chained. Affected builds are 25.1.1.2 and prior, 25.1.2.2 and prior, and 22.8R2.5 and prior. For CVE-2026-104935, Ivanti states that…
Ransomware, supply‑chain attacks, leaks, patches, and incident reports.
An article joins this feed when it matches these terms. Each one is also a search of its own.