#News


LiteLLM’s Security Flaw: Developer Machines Exposed, Credentials Stolen by Hackers.

Apr 6, 2026 // 14:48

The most actively used part of a company’s IT setup is the computer used by developers. This laptop is where login details are made, tried […]

Ransomware (Qilin, Warlock) exploits driver flaws to disable over 300 EDR security tools.

Apr 6, 2026 // 13:08

Cisco Talos and Trend Micro have found that threat actors using Qilin and Warlock ransomware are employing the bring your own vulnerable driver (BYOVD) method […]

German police link REvil leaders to 130 ransomware attacks in Germany.

Apr 6, 2026 // 10:27

The German police (BKA) have identified the person behind the major players in the defunct REvil ransomware operation (also known as Sodinokibi), which was a […]

FortiClient EMS Security Hole: Attacks in Progress, Urgent Update Out

Apr 6, 2026 // 09:37

Fortinet urgently released a security patch over the weekend to address a newly identified, actively exploited, high-severity vulnerability in FortiClient Enterprise Management Server (EMS). Designated […]

QR code phishing scams now use fake traffic tickets sent via text.

Apr 6, 2026 // 09:37

Fraudsters are sending out bogus “Default Notice” text messages that look like they’re from state courts across the country. These messages try to get people […]

Automated credential theft exploits targeting React2Shell vulnerability.

Apr 5, 2026 // 17:37

A widespread hacking campaign is underway, utilizing automation to pilfer login details by exploiting a React2Shell vulnerability (CVE-2025-55182) in susceptible Next.js applications. Compromised systems, numbering […]

Axios npm package compromised via forged Teams error solution, leading to maintainer account hijacking.

Apr 5, 2026 // 10:37

The people in charge of the well-known Axios HTTP client have shared a detailed report about how a developer was tricked by a social engineering […]

Device code phishing explodes, up 37x! New kits fuel widespread attacks.

Apr 4, 2026 // 17:37

Account takeovers via device code phishing, exploiting the OAuth 2.0 Device Authorization Grant process, have seen a staggering increase of over 37 times this year. […]

LinkedIn’s Privacy Breach: Secretly Tracking Chrome Extensions, Gathering User Data

Apr 4, 2026 // 17:17

A new report called “BrowserGate” suggests that LinkedIn, owned by Microsoft, is using hidden JavaScript on its website to identify browser extensions and gather device […]

LinkedIn’s Chrome Extension Spying: Data Collection Revealed on 6000+ Extensions.

Apr 3, 2026 // 23:57

A new study called “BrowserGate” suggests that LinkedIn, owned by Microsoft, is secretly using JavaScript code on its website to examine visitors’ browsers for installed […]

Previous 1 … 354 355 356 357 358 … 395 Next