2026

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack 2026-06-01 at 17:37 By Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that’s targeting developers using OpenAI Codex through a legitimate-looking remote web UI. The tool, named codexui-android, is advertised on GitHub and npm as a remote web UI for […]

Critical WP Maps Pro Flaw Actively Exploited to Create Admin Accounts 2026-06-01 at 17:37 By Threat actors are attempting to actively exploit a critical security flaw impacting WP Maps Pro, a WordPress plugin that has had over 15,000 sales on the Envato Market, to create malicious administrator accounts on susceptible sites. WP Maps Pro allows

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More 2026-06-01 at 16:59 By Monday hit like a cron job with anger issues. A busted auth path here, a repo-side faceplant there, some “patched-ish” thing already getting chewed on in the wild, and then the usual bonus round: poisoned dev tools,

Breaking Down UK Surveillance Levels: Who Is Most Watched? 2026-06-01 at 16:15 By Mapping the United Kingdom’s surveillance, including cameras, facial recognition technology and automatic number plate recognition.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan 2026-06-01 at 14:54 By A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic and Taiwan to deliver an AdaptixC2 agent. According to Seqrite Labs, targets of the campaign include government, research, academic,