Docker Sandboxes flaws can expose host files or Unix sockets outside the workspace; both were fixed in 0.42.0, with no ...

Unbound 1.26.1 fixes a critical DNSSEC heap overflow that malicious zones can trigger, with possible remote code execution.

FamousSparrow deploys SparroWocky against government entities across Latin America, enabling command execution and file ...

Cisco ISE CVE-2026-76460 is under active exploitation; successful exploitation may yield root command execution.

Gyazo says a breach exposed 23.62 million user records and 490 million image metadata records, including IDs used to build ...

U.S. authorities seized two NightmareStresser domains tied to a DDoS-for-hire service used in hundreds of thousands of attacks and attempts.

N0va phishing abuses legitimate authentication flows to capture access and refresh tokens and establish SSO access to ...

Researchers showed one browser extension could hijack AI features in five Chromium products; some demos could access files, ...

Attackers are exploiting CVE-2026-27540 in WooCommerce Wholesale Lead Capture to upload PHP web shells and gain remote code ...

Issabel Framework flaw CVE-2026-89026 is under active exploitation and can enable unauthenticated OS command execution via a ...

Mandiant says an attacker hijacked an active AI coding session, stole GitHub OAuth tokens, and spread Shai-Hulud across about ...

BambooToken uses MQTT for C2 across Windows and Linux, with a dozen compromised entities detected in Asia and South America.