Russian Laundry Bear group exploits Zimbra zero-day to steal email and 2FA codes
US agencies warn that Russian APT group Laundry Bear is actively exploiting CVE-2025-66376 against unpatched Zimbra Collaboration servers worldwide.
The Latest
ChatGPT AgentForger bug lets phishing links deploy rogue workspace agents
A vulnerability in OpenAI's ChatGPT workspace agent system could let attackers deploy malicious agents through a single phishing link.
Kimi K3 AI agents discover Redis zero-days and build working RCE exploits
Chinese AI agents from Kimi K3 autonomously found zero-day vulnerabilities in Redis and developed functional remote code execution exploits.
Uploaded svg images could hijack microsoft bing servers with system rights
Attackers could achieve SYSTEM-level code execution on Bing servers by uploading crafted SVG files through two chained vulnerabilities.
Smart tv proxy network dismantled as fbi seizes two million devices
Law enforcement seized hundreds of domains linked to a residential proxy service that turned smart TVs into botnet nodes for…
CVE chain in PTC engineering tools opens door for Cl0p data heists
A pre-auth information leak combined with unauthenticated RCE in PTC products lets Cl0p affiliates steal intellectual property.
Java deserialization bug in Fastjson draws active exploits with no fix ready
Alibaba's Fastjson 1.x library carries a critical deserialization flaw that attackers are exploiting in Spring Boot applications.
SourTrade malvertising uses your browser to assemble malware piece by piece
A malvertising campaign called SourTrade makes victims' browsers download and assemble malicious executables using a legitimate runtime.
Chick-fil-A loyalty accounts drained in credential stuffing spree
Chick-fil-A disclosed a credential stuffing attack that compromised customer accounts in the Chick-fil-A One loyalty program.
DevMan RaaS shop streamlines ransomware for affiliates through one web panel
A ransomware-as-a-service platform called DevMan offers a centralized web dashboard for payload generation and victim management.
Europol takedown operation flags 4,340 URLs tied to the Com network
Europol identified thousands of horrific URLs linked to The Com network as part of an ongoing crackdown on the violent extremist youth group.
Standard users can forge domain credentials through Certighost AD certificate bug
A newly patched Active Directory flaw let standard domain users impersonate domain controllers and forge authentication tokens.
Crafted SVG files exploit Bing image pipeline for SYSTEM-level code execution
Researchers found flaws in Microsoft's Bing Images service allowing crafted SVG files to execute arbitrary commands as SYSTEM on internal…
Ubuntu Snap sandbox race condition lets local attackers gain root privileges
A race condition in Ubuntu's Snap sandbox initialization, tracked as CVE-2026-8933, lets local attackers escalate privileges to root on default…
Spotlight
Adobe Acrobat browser extension flaw exposed WhatsApp chats on 329 million devices
A vulnerability chain in the Adobe Acrobat Chrome extension let any webpage silently steal WhatsApp Web chats from 329 million browsers without malware.
Google restricts powerful new Gemini Cyber AI to government partners only
Google DeepMind released Gemini 3.5 Flash Cyber, a specialized AI for vulnerability hunting, restricted to governments and trusted partners due to dual-use risks.
Check Point rushes fix for actively exploited SmartConsole bypass
Check Point patched a critical SmartConsole authentication bypass under active exploitation that gives attackers full admin access to security management servers.
NuGet package NewJson.Net delivers game cheats inside working library fork
A trojanized Newtonsoft.Json fork on NuGet smuggles game-rigging malware inside a fully functional serialization library to evade detection.
Features
UK AI Security Institute finds every frontier model cheats on cyber evaluations
OpenAI and Anthropic models broke rules in cybersecurity tests and failed to admit it, with cheating rates between 7.8% and…
Suno data breach exposes over 55 million user accounts and payment data
Have I Been Pwned confirms the massive breach of the AI music platform, including email addresses and partial credit card…
GlideRecord query feature turns ServiceNow sandbox escape into pre-auth RCE
CVE-2026-6875 lets attackers bypass the ServiceNow script sandbox through a JavaScript override technique, with exploitation already in the wild.
Three-country police action dismantles Kratos phishing-as-a-service empire
German and US law enforcement seized 200 servers and arrested the alleged developer of the Kratos phishing platform in Indonesia.
SharePoint flaw CVE-2026-50522 under attack after public PoC goes live
Attackers are exploiting a critical SharePoint RCE vulnerability to steal machine keys, and patching alone won't lock them out.
FakeGit campaign floods GitHub with 7,600 malicious repositories
A large-scale supply chain attack dubbed FakeGit uses thousands of deceptive GitHub repositories to distribute SmartLoader malware.
