CVE-2026-43503 Exploit Turns Kernel Memory Optimization Into Root Access
JFrog published the first working exploit for CVE-2026-43503, a Linux kernel flaw that lets local attackers overwrite file backed memory through cloned network packets to gain root access without leaving disk traces.
The Latest
Former EU Spyware Investigator’s iPhone Compromised by NSO Group Pegasus
Forensic analysis reveals the lawmaker's iPhone was infected using the PWNYOURHOME zero-click exploit during sensitive committee deliberations on spyware abuses.
JetBrains Patches Critical Flaws That Could Allow Full Server Compromise
Attackers can chain authentication bypass flaws with remote code execution vulnerabilities across JetBrains Hub, YouTrack, TeamCity, and IDEs to take…
The IPO Window Opens: 9 Cybersecurity Startups Poised for Public Debuts
With Netskope and Rubrik proving the public markets are receptive, PitchBook identifies nine VC-backed cybersecurity startups most likely to follow…
Opera Debuts Paste Protect to Counter ClickFix Social Engineering Attacks
Opera's new Paste Protect feature blocks malicious clipboard commands before they can be pasted into terminals, countering the growing ClickFix…
ShinyHunters Extortion Attempt Hits Medtronic Customer Data
Medtronic is notifying customers after the ShinyHunters extortion group accessed corporate IT systems containing personal and health information.
Alleged Scattered Spider Member Extradited to US on Fraud Charges
A dual US and Estonian citizen has been extradited from Finland to face charges for his alleged role in the…
Ransomware Operators Exploit Citrix Flaw and Supplier Credentials in New Attacks
Anubis ransomware affiliates exploit Citrix Bleed 2 and VPN credentials, using legitimate RMM tools to persist while The Gentlemen and…
OAuth Token Theft: ConsentFix Attack Hijacks Microsoft 365 Sessions
Attackers are using a new OAuth token theft technique called ConsentFix that hijacks Microsoft 365 sessions by tricking users into…
Google Takes Down Massive Home Device Proxy Network Used by Cybercriminals
Google disrupted a network of 2 million home devices used as proxies for cybercriminal traffic, including password-guessing attacks and espionage…
Researchers Trick ChatGPT into Exposing System Files via Path Traversal
A researcher demonstrated a four step exploit chain using social engineering and path traversal to access restricted system files in ChatGPT's sandboxed environment.
Apple Patches Over Two Dozen Vulnerabilities in iOS, macOS, and Safari
Apple's latest security patches address over two dozen vulnerabilities, primarily in WebKit, that could be chained to steal data or…
New Attack Chain Exploits Blogger to Deploy Information Stealer
Researchers detail a multi-stage attack that uses Blogger pages and PowerShell to deploy the PureLogs information stealer while evading traditional…
Steganographic Detection Code Found in Anthropic’s Claude Code CLI Tool
Reverse engineering of Anthropic's Claude Code CLI tool reveals hidden code that uses steganography in system prompts to covertly signal…
Spotlight
Enriching Cyber Threat Intelligence with Contextual Data
The integration automatically enriches IP addresses, domains, and URLs with contextual risk scoring, infrastructure relationships, and phishing analysis within the OpenCTI knowledge graph.
Campaign Launches 81 Million Password Spray Attempts Against Microsoft 365 Tenants
Huntress researchers observed a password spraying campaign that used valid credentials from past breaches and an OAuth flaw to compromise 78 Microsoft 365 accounts across 64 organizations.
FTC fines Amazon $2.25 million for blocking fraud victims from obtaining transaction records
The FTC alleged that Amazon customer service agents routinely blocked identity theft victims from accessing evidence of fraudulent transactions by citing privacy and security reasons.
Malicious WhatsApp VBScript Lures Victims by Posing as Financial Documents
Attackers are using compromised WhatsApp accounts to distribute malicious VBScript files disguised as financial documents, leading to the unauthorized installation of remote management software.
Features
U.S. Commerce Department Ends Export Controls on Two Anthropic AI Models
The decision followed an 18 day standoff during which global access to the advanced systems was blocked due to national…
Unpatched Flaw in Apple’s Email Masking Feature Leaks Real Addresses
A long standing flaw in Apple's Hide My Email feature, unrepaired over a year after disclosure, lets attackers reverse engineer…
FortiGate Credential Theft Campaign Directly Fuels Ransomware Operations
Researchers confirmed that the FortiBleed credential harvesting campaign targeting FortiGate firewalls is directly feeding INC Ransom and Lynx ransomware operations…
Microsoft Confirms Defender Zero Day CVE-2026-50656 Bypasses Protections
A fully functional exploit for a Microsoft Defender privilege escalation flaw works on patched systems and bypasses signature based detection.
Active Exploitation of Ubiquiti UniFi OS Flaws Prompts Urgent CISA Directive
CISA warns that attackers are actively exploiting at least one Ubiquiti UniFi OS vulnerability and gives federal agencies until June…
New Browser-Only Ransomware Hijacks Chrome Feature to Encrypt Android Photos
A proof of concept shows how AI-generated code turns a legitimate Chrome file access feature into a weapon for encrypting…
