Chinese hackers took control of a target organization’s authentication stack and maintained persistence for 10 years, with full visibility into the administrative activity. Dubbed “Operation […]
A single poisoned notification from WhatsApp, Slack, SMS, Signal, Instagram, or Messenger could have hijacked Google Gemini’s voice assistant on Android and made it open […]
Hackers are exploiting a critical privilege escalation vulnerability (CVE-2026-8206) in the Kirki plugin for WordPress to take over any user account, including those belonging to […]
A threat actor tracked as DriveSurge has been operating large-scale malware distribution campaigns using ClickFix and FakeUpdates techniques on compromised sites. Thousands of websites have […]
Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. […]
Cybersecurity researchers have exposed a new Mirai-derived botnet that self-identifies as xlabs_v1 and targets internet-exposed devices running Android Debug Bridge (ADB) to enlist them in […]
Threat actors are exploiting security flaws in TBK DVR and end‑of‑life (EoL) TP-Link Wi-Fi routers to deploy Mirai-botnet variants on compromised devices, according to findings […]
Ubiquiti has released fixes for a pair of security issues in the UniFi Network Application. One of these flaws is critical and could allow unauthorized […]
Researchers at Socket identified a targeted supply chain attack involving five malicious Rust crates and an autonomous AI bot designed to steal developer secrets. Malicious Rust Crates […]
A significant vulnerability was recently found in Chrome’s Gemini Live AI assistant. It could have allowed malicious browser extensions to take over the AI panel […]
© Bulletproof Servers. All rights reserved.