OpenBSD picks a 37-year-old bug as an exploit chain’s front door
A research firm built a working root exploit on Unix by chaining an integer overflow patched as a reliability fix with a separate use-after-free.
The Latest
GhostAction broke into 1,900 GitHub accounts in a single wave
A second surge of the credential-theft campaign pushed malicious workflows across 28,000 repositories in about twenty minutes.
Langflow MCP bug draws 1,423 exploit attempts from 27 addresses
An authenticated flaw that passes a user-supplied command straight to bash is being hammered by attackers who only need one…
Burger King Japan app breach exposed data on 11 million diners
Attackers sat inside the fast-food chain's membership system for five days and walked off with contact details for roughly 11.18…
Hijacked backup app tokens opened 173 Microsoft 365 tenants
Microsoft says a compromised ConnectWise Cloud Backup OAuth application let an intruder mint access tokens across 173 customer tenants.
Microsoft’s follow-up patch wave hits two dozen Office bugs
A second batch of fixes lands days after the record Patch Tuesday rollout.
Silent Lynx turned operational sloppiness into its own fingerprint
Open directories and Astana office hours gave away a Kazakhstan-linked espionage crew.
A contractor breach silenced US bankruptcy court notices
BAE Systems runs the noticing center, and a week-long outage left creditors unserved.
Typosquatted Arch packages handed strangers root on desktops
Misspelled AUR helper names turned a build step into full-system compromise.
Federal patch list adds an Atlassian file-read bug under attack
CISA gave agencies three weeks to close a flaw attackers already reached through double colons.
PwnEscape lets a VM guest slip past the Linux kernel boundary
An isolation failure in the Linux kernel's network handling let a guest virtual machine breach the boundary separating it from its host. Tracked as CVE-2026-99999, the PwnEscape flaw is fixed on seven stable branches.
A stealthy implant sat on 500 firewalls after one FortiManager hit
Unit 42 traced a two-year intrusion that turned a single management box into keys for hundreds of networks.
Chinese spies rode a BeyondTrust zero-day into support appliances
A suspected China-nexus crew spent weeks inside Remote Support boxes before anyone noticed.
Legal Aid breach sweeps up archived claims reaching back to 1978
UK officials now say the April 2025 intrusion took far more historical data than first thought, including probation records for…
Spotlight
UK sanctions a crypto platform it calls a laundering hub
Britain has frozen the assets of Cryptomus and three payment services, citing a pipeline that helps Russia move money and fund cybercrime.
North Macedonia charges the alleged OLVX market operator
Prosecutors say a 20-year-old ran a marketplace selling stolen data and attack tools, pulling in more than $500,000 since 2023.
Citizen Lab ties a spyware pipeline to ordinary ad slots
Researchers say targeted advertising is being used to push zero-click spyware onto millions of devices, with an Israeli ad firm as the facilitator.
CikaBika RAT hides its command channel inside Discord
A Rust-based remote access trojan delivered through document lures is using Discord as its control panel, Darktrace reports.
Features
Hirudo trojan swaps out your banking app for its own copy
A new Android RAT uninstalls the real banking app and replaces it with a modified build that blinds the bank's…
Palo Alto patches a firewall zero-day hit by limited attacks
A PAN-OS flaw in the management interface lets an authenticated attacker run code as root, and CISA wants federal systems…
An unauthenticated attachment bug hands root on Cisco email gear
Attackers are already exploiting a critical Secure Email Gateway flaw that hands over root access, and federal agencies have three…
Drone strikes knock Yandex datacenters and payments offline
Three Ukrainian drone attacks hit Yandex facilities, leaving cloud and payment services degraded for days.
Microsoft dismantles a Chinese phishing market that sent a billion messages
A court order let Microsoft and Health-ISAC seize the infrastructure behind YAM Store, CoGUI, and Iron Man.
US agents seize 187 laptops in a North Korean IT worker sweep
Two Americans are accused of helping Pyongyang's fake remote workers land jobs at US companies.