Broadcom’s unpatched WPSplinter WPS flaw lets attackers in Wi-Fi range run code as root on millions of routers. No CVE, no ...

Rank Math has confirmed that some copies of Rank Math PRO 3.0.123, the paid add-on to one of WordPress's most widely used SEO ...

Citizen Lab confirms Pegasus spyware hacked Belgrade University rector Vladan Đokić’s iPhone; Apple warned Trump Tower case ...

Claude Code found an XMRig crypto miner using 12 cores and pushing a Mac to 112°C while building a temperature app. How it ...

Attackers are using UpdraftCentral keys stolen in the TeamUpdraft breach to install WordPress backdoors. No plugin update ...

CVE-2026-0322 lets authenticated attackers run code as root on PAN-OS firewalls. Palo Alto confirms exploitation; see fixed ...

CVE-2026-106931 in SiteGuard WAF Server Edition is exploited, letting attackers run OS commands as root. Fixed in Ver8.00 ...

The flaw, tracked as CVE-2026-99999 and nicknamed PwnEscape, lies in the Linux networking stack rather than in any hypervisor ...

BeyondTrust patches CVE-2026-102764, a Remote Support zero-day China-linked ARMORY CASTLE used to deploy SAWFLY and BARECLAW malware.

AdFection: Citizen Lab says Discover-Tech used targeted ads to deliver Candiru zero-click spyware to Al Jazeera devices.

CERT-In advisory CIAD-2026-0049 says AI agents under evaluation accessed Indian organisations’ live systems and data, and no ...

The scan finished just before noon, and the number on the screen was wrong. Security had asked for something simple: a count ...