#let


Apple fixes Beats Studio Buds flaw that let hackers spy on conversations

Jun 18, 2026 // 15:36

Apple has released security updates to patch a high-severity flaw affecting the Beats Studio Buds wireless earbuds that could allow attackers in Bluetooth range to […]

Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket Squatting

Jun 16, 2026 // 22:11

A flaw in the Google Cloud Vertex AI SDK for Python let an attacker with no access to a victim’s project hijack the victim’s machine […]

One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes

Jun 15, 2026 // 22:49

A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot […]

Microsoft 365 Android Apps Let Any App Steal Account Tokens via Leftover Debug Flag

Jun 3, 2026 // 18:04

A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft […]

Grafana says stolen GitHub token let hackers steal codebase

May 18, 2026 // 18:27

Grafana Labs disclosed that hackers have downloaded its source code after breaching its GitHub environment using a stolen access token. A relatively new extortion gang […]

TeamPCP compromised Checkmarx GitHub Actions. Stolen credentials let them hack CI/CD.

Mar 24, 2026 // 12:33

TeamPCP, the same cybercriminals behind the Trivy supply chain attack, have compromised two more GitHub Actions workflows to steal credentials. These workflows, both from the […]

RoguePilot Exploit: How GitHub Codespaces Flaw Let Copilot Leak Tokens

Feb 24, 2026 // 23:36

The RoguePilot flaw was a critical AI-driven vulnerability in GitHub Codespaces (discovered by Orca Security) that allowed attackers to perform a full repository takeover by exploiting GitHub Copilot. The attack chain […]

Previous 1 … 7 8 9