#malicious


Critical Zimbra Flaw Could Let Crafted Emails Run Malicious Code in User Sessions

Jul 12, 2026 // 15:38

Zimbra is urging customers to apply updates to address a critical security vulnerability impacting the Classic Web Client that could result in arbitrary code execution. […]

Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot

Jul 10, 2026 // 19:05

Researchers at firmware security firm Binarly have found six new flaws in U-Boot, the small program that starts up hardware as varied as home routers, smart cameras, […]

TopĀ AI Agents Built to Catch Malicious Code Can Be Tricked Into Running It

Jul 9, 2026 // 08:25

Ask an AI coding agent to scan open-source code for security holes, and it might run the attacker’s code on your own machine instead. That […]

GhostApproval Symlink Flaws Could Let Malicious Repos Run Code in AI Coding Agents

Jul 9, 2026 // 07:35

Researchers at Wiz found that a flaw in six popular AI coding assistants lets a booby-trapped code project quietly take control of a developer’s computer. The assistant […]

SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with Self-Extracting Packing

Jul 6, 2026 // 11:23

Scanners meant to catch malicious add-on “skills” for AI coding agents can be fooled by a few simple changes that leave the malware working, according […]

Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited Pages

Jul 6, 2026 // 11:23

Researchers found a flaw in Opera GX, the gaming-focused version of the Opera browser, that let a malicious website silently install a browser add-on and use […]

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

Jul 4, 2026 // 14:26

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm, Packagist, […]

Malicious PyPI packages give hackers control of Telegram bot servers

Jul 1, 2026 // 00:17

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files […]

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

Jun 30, 2026 // 03:05

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every […]

Malicious Perplexity Chrome Extension Intercepted Searches and Address Bar Input

Jun 29, 2026 // 21:45

Microsoft has found a malicious Chrome extension that posed as the AI search engine Perplexity and quietly logged what people searched for. It routed every […]

Previous 1 … 7 8 9 10 11 … 14 Next