Featured

Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes

Android, exploit, Featured, iOS, Midnight Blizzard, Mobile & Wireless, Nation-State, Russia /

Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes 2026-11-05 at 12:37 By Ionut Arghire The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine. The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on SecurityWeek. This article […]

Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes Read More »

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million

AI, Artificial Intelligence, bug bounty program, Featured, Meta, Muse, Vulnerabilities, vulnerability /

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million 2026-11-04 at 10:27 By Eduard Kovacs A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff. The post Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million appeared […]

Meta Shares Top Muse Bug Bounty Findings as Payouts Reach $1.2 Million Read More »

Over 100 European Stores Hit as Supermarket Fridge Attacks Return

controller, cyberattack, Danfoss, Europe, Featured, ICS, ICS/OT, refrigeration, supermarket /

Over 100 European Stores Hit as Supermarket Fridge Attacks Return 2026-11-03 at 09:43 By Eduard Kovacs Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond. The post Over 100 European Stores Hit as Supermarket Fridge Attacks Return appeared first on SecurityWeek. This article is an excerpt from […]

Over 100 European Stores Hit as Supermarket Fridge Attacks Return Read More »

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain

exploited, Featured, Ivanti, Vulnerabilities, Zero-Day /

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain 2026-11-02 at 09:57 By Eduard Kovacs CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks. The post Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain appeared first on SecurityWeek. This […]

Ivanti Patches Two More Zero-Days Exploited in Connect Secure Attack Chain Read More »

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor

Binance, crypto heist, Cryptocurrency, cybercrime, Featured, Lazarus, North Korea, TraderTraitor /

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor 2026-10-30 at 10:16 By Eduard Kovacs Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop. The post $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor appeared first on SecurityWeek. This article is an […]

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor Read More »

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI

AI, cybersecurity, Election, Featured, Government, voting /

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI 2026-10-29 at 17:00 By Kevin Townsend Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure. The post How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI appeared first on SecurityWeek. This […]

How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI Read More »

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

ESXi, exploited, Featured, VMWare, VMware ESXi, Vulnerabilities, vulnerability, Zero-Day /

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day 2026-10-29 at 10:01 By Ionut Arghire CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day Read More »

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

Brotli, exploited, Featured, Malware & Threats, Node2Shell, Vulnerabilities, vulnerability /

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts 2026-10-28 at 10:37 By Eduard Kovacs CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek. This […]

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts Read More »

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

controversy, Featured, SSH, Tailscale, Tailworm, Vulnerabilities, vulnerability /

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws 2026-10-27 at 17:26 By Eduard Kovacs Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek. This article is […]

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws Read More »

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

apple, Featured, iOS, macOS, Mobile & Wireless, patches, Vulnerabilities, vulnerability /

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 2026-10-27 at 13:49 By Eduard Kovacs Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to […]

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 Read More »

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative, Featured, ICS, ICS/OT, OT, port, ship, Vulnerabilities, vulnerability, vulnerability index /

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems 2026-10-27 at 09:14 By Eduard Kovacs Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek. This […]

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems Read More »

Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI

Artificial Intelligence, Featured /

Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI 2026-10-26 at 22:20 By Associated Press A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks. The post Anthropic Files for […]

Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI Read More »

PHP2Shell Exploitation Moves From Probes to Working Shells 

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Exploitation Moves From Probes to Working Shells  2026-10-26 at 15:30 By Eduard Kovacs Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

PHP2Shell Exploitation Moves From Probes to Working Shells  Read More »

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

Broccoli2Shell, Brotli, Featured, HTTP2Shell, Node2Shell, Vulnerabilities, vulnerability /

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages 2026-10-26 at 12:21 By Eduard Kovacs An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek. This article is […]

Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages Read More »

Mythos 5 Ignored Real-World Harm in July Attack

AI, Artificial Intelligence, Featured, Mythos, rogue AI /

Mythos 5 Ignored Real-World Harm in July Attack 2026-10-26 at 11:10 By Ionut Arghire The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub. The post Mythos 5 Ignored Real-World Harm in July Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Mythos 5 Ignored Real-World Harm in July Attack Read More »

LiteLLM Compromised in Fresh Supply Chain Attack

AI, Artificial Intelligence, Featured, LiteLLM, supply chain attack, Supply Chain Security /

LiteLLM Compromised in Fresh Supply Chain Attack 2026-10-23 at 11:10 By Ionut Arghire Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

LiteLLM Compromised in Fresh Supply Chain Attack Read More »

Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016

APT, Featured, Infy, Iran, Malware & Threats, Nation-State, Prince of Persia /

Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 2026-10-23 at 09:39 By Eduard Kovacs After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016. The post Iran’s Prince of Persia APT Hosts C&C in US for First […]

Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 Read More »

PHP2Shell Exploitation Started Days Before Patches

exploited, Featured, PHP, PHP2Shell, Vulnerabilities /

PHP2Shell Exploitation Started Days Before Patches 2026-10-22 at 12:48 By Ionut Arghire Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Exploitation Started Days Before Patches Read More »

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Featured, Oracle, Oracle CPU, patches, Vulnerabilities, vulnerability /

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU 2026-10-22 at 10:38 By Eduard Kovacs Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU Read More »

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

exploited, Featured, PHP, PHP2Shell, Vulnerabilities, vulnerability /

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors 2026-10-21 at 19:50 By Ionut Arghire Several cybersecurity companies saw exploitation attempts before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors Read More »

Scroll to Top