#news


Hugging Face Diffusers Flaws Could Let Model Repositories Execute Arbitrary Code

Aug 3, 2026 // 10:10

Three high-severity security flaws have been disclosed in Hugging Face’s Diffusers library that could allow crafted model repositories to stealthily execute arbitrary code on machines […]

COLDCARD wallet RNG flaw likely linked to $88 million Bitcoin theft

Aug 3, 2026 // 10:09

Researchers suspect that a vulnerability in COLDCARD hardware wallet firmware was exploited to steal an estimated $88.6 million in Bitcoin from thousands of wallets whose […]

N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete

Aug 3, 2026 // 10:09

N-able said attackers exploited an authentication bypass in N-central to gain remote administrative access and reach the customer systems managed through those servers. Its first […]

Amazon links Debug, Chalk NPM supply-chain attacks to North Korean hackers

Aug 3, 2026 // 09:58

Amazon linked multiple high-profile open-source software supply chain attacks targeting the Node Package Manager (npm) ecosystem to North Korean hackers. The cloud computing giant linked […]

JetBrains warns of critical TeamCity remote code execution flaw

Aug 3, 2026 // 09:58

JetBrains is warning of a critical authentication bypass vulnerability affecting TeamCity On-Premises that could be exploited to achieve remote code execution. The security issue is […]

ESET tracks rise in malicious AI skills and adaptable malware

Aug 3, 2026 // 09:58

The first half of 2026 shows how attackers continue to improve the efficiency and scalability of their operations. Rather than relying on entirely new methods […]

CISA warns of cyberattacks disrupting U.S. water utilities

Aug 3, 2026 // 09:57

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of a significant increase in attacks targeting internet-exposed programmable logic controllers (PLCs) in the water […]

Hacker uses DeepSeek AI to autonomously attack vulnerable servers

Aug 3, 2026 // 09:57

A Chinese-speaking threat actor is using the DeepSeek AI model and the open-source Hermes Agent to conduct autonomous cyberattacks on exposed servers with limited human […]

Online ad firm Adform’s script compromised to steal cryptocurrency

Aug 3, 2026 // 09:57

Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites using its ad platform, replacing wallet addresses copied to visitors’ clipboards […]

Arch Linux disables AUR package adoption to stop malware flood

Aug 3, 2026 // 09:57

The Arch Linux project has temporarily disabled adoption of Arch User Repository (AUR) packages after a surge in malicious takeovers of existing packages. The decision […]

Previous 1 … 132 133 134 135 136 … 388 Next