A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and… Read More »Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM) that lets them run code on a BIG-IP system without logging in, F5 says. The flaw, CVE-2026-94127, affects… Read More »F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other social preview images, Vercel said. The… Read More »Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal Bureau of Investigation and stolen data belonging to current and former employees at the… Read More »ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
Cybersecurity researchers have disclosed details of a malicious npm package named “tw-pkgprobe-7731” that masquerades as a security tool targeting developers integrating Twilio into their applications, while stealthily attempting to harvest… Read More »Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
WordPress has fixed a critical flaw in its core software that lets an attacker with no account make a site load a PHP file from outside its theme folders. On… Read More »WordPress Issues Patch for Critical Flaw That Can Enable Code Execution on Some Servers
Attackers exploited a previously unknown flaw in Check Point’s Security Management Server in a handful of targeted attacks on July 23, the company said. The flaw, CVE-2026-93616, allows an attacker who… Read More »Check Point Warns of Management Server Zero-Day Exploited in Targeted Attacks
A zero-day proof-of-concept tool that stops Microsoft Defender from installing platform and signature updates by filling all available disk space was published on GitHub on September 19. The tool, called BigDiskBuster, has… Read More »Researcher Drops BigDiskBuster Zero-Day PoC That Blocks Microsoft Defender Updates
A critical vulnerability in Bifrost, an open-source AI gateway that routes requests to more than 20 LLM providers, allows an unauthenticated attacker to run arbitrary commands on the gateway server with… Read More »Critical Bifrost AI Gateway Flaw Lets Attackers Run Commands Without Credentials
Microsoft on Tuesday announced the takedown of the EvilTokens device code phishing service that it said used artificial intelligence (AI) “at every step of the attack chain.” The action, carried… Read More »Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises