New Linux kernel bug gives attackers root on servers and Android devices
The CVE-2026-46242 kernel flaw dubbed 'Bad Epoll' grants unprivileged users root access via a use-after-free in the epoll subsystem, affecting Linux desktops, servers, and Android.
The Latest
Hackers hijack Microsoft passkey enrollment in voice phishing blitz
The Muddled Libra threat actor uses voice phishing and fake Microsoft Entra passkey enrollment portals to gain persistent access to…
One missing header is all it takes to own a Gitea Docker instance
Attackers are actively exploiting CVE-2026-20896, a critical Gitea Docker authentication bypass that grants full repository access with a single HTTP…
AI coding assistants let researchers walk right past safety filters
Researchers achieve 100 percent jailbreak success against AI coding assistants including GitHub Copilot by decomposing harmful requests into ordinary coding…
Microsoft races to contain RoguePlanet zero-day threat across enterprise systems
Microsoft contains a zero-day vulnerability tracked as RoguePlanet that was actively exploited in enterprise environments, with CISA adding it to…
Healthcare sector becomes prime target as cybercriminals shift tactics
Healthcare organizations face a wave of ransomware and data breach attacks as cybercriminals target medical data and legacy hospital systems,…
Authentication Bypass Vulnerabilities Patched in BeyondTrust Remote Access Products
BeyondTrust released fixes for two critical pre-authentication bypass vulnerabilities in Remote Support and Privileged Remote Access products.
Microsoft Teams for macOS Bug Disrupts Screen Sharing in Government Clouds
Microsoft confirms a macOS Teams bug causing blank screens during screen sharing, with a delayed fix now expected in late…
Helix Extortion Group Targets SharePoint with Vishing and Device Code Tactics
The Helix group uses vishing and device code phishing to break into SharePoint, then exfiltrates data for extortion or sale.
GigaWiper Backdoor Blends Remote Access with Irreversible Data Destruction
GigaWiper is a modular Golang backdoor that merges remote access tools with disk wiping and fake ransomware capabilities.
Free Android VPN Apps Fail Basic Security Tests in Major Academic Study
A new automated testing framework reveals widespread traffic leaks, plaintext data transmission, and tracking behavior across 281 popular free Android VPN apps.
Researcher Finds Google Dialogflow CX Flaw Opened Door to Agent Hijacking
Google patched a flaw in Dialogflow CX that allowed an attacker with edit permissions on one chatbot to hijack others…
Insider Negotiator Helped BlackCat Ransomware Gang Maximize Payouts
A former cybersecurity incident response employee received a 70-month prison sentence for feeding confidential victim data to the BlackCat ransomware…
Dutch Police Trace Odido Telecom Hack to Local Suspects Through Phone Call
Investigators traced the Odido breach to local hackers after a Dutch-speaking caller impersonated an IT employee to gain access.
Spotlight
Microsoft Plans to Pull Legacy OWA Light from Exchange Server
Microsoft is removing the legacy OWA Light email client from Exchange Server in August 2026, citing modern browser capabilities and security improvements.
AI Coding Assistant Bypasses Safety Filters Through Multi Step Code Tasks
Researchers discovered GitHub Copilot produces harmful content in 816 out of 816 workflow runs when dangerous requests are broken into ordinary coding steps, despite refusing direct dangerous queries.
Friendly Fire Attack Hijacks AI Security Agents to Run Malicious Code
Researchers demonstrated that autonomous AI coding agents from Anthropic and OpenAI will execute hidden malicious binaries when asked to review untrusted open source code for security vulnerabilities.
Recovery of Dell BIOS Passwords Enabled by Broken Encryption Scheme
Dell BIOS passwords stored with a flawed XOR cipher allow full recovery from flash dumps in milliseconds, posing risks to full disk encryption.
Features
Leaked Server Exposes Mass WordPress Backdoor Operation
Researchers found an attacker's unsecured server containing 800 MB of data, revealing how a webshell brokerage compromised thousands of WordPress…
Zimbra Classic Web Client Vulnerability Allows Code Execution via Malicious Emails
A stored XSS vulnerability in Zimbra's Classic Web Client lets attackers execute malicious code when a user opens a specially…
CISA Publishes Post Incident Analysis After Contractor Leaks AWS GovCloud Credentials
A contractor's accidental exposure of AWS GovCloud credentials in a public GitHub repository prompted CISA to release a detailed after…
Threat Actor Claims Theft of 35 GB of Source Code from Accenture
A threat actor claims to have stolen 35 GB of data including source code and credentials from Accenture, but the…
Remote Crash Vulnerability Discovered in Alibaba’s XQUIC Library for HTTP/3
A single arithmetic error in XQUIC's memory handling during QPACK table resizing lets any remote client crash HTTP/3 servers with…
Rust Based MODBEACON Trojan Relies on gRPC Streaming for Stealthy C2
The memory resident Rust based trojan reuses the transport layer from an open source anti-censorship proxy framework to create encrypted…
