#news


Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

Jun 9, 2026 // 14:07

The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel artifacts across 19 packages in the […]

New FROST Attack Lets Websites Track What Sites and Apps You Open via SSD Timing

Jun 9, 2026 // 14:07

A malicious website can work out which sites you visit and which apps you open, using nothing but JavaScript and the timing of your SSD. […]

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

Jun 9, 2026 // 11:36

CISA has ordered U.S. government agencies to secure their Check Point Remote Access VPN and Mobile Access deployments against a critical vulnerability exploited in zero-day […]

Google patches new Chrome zero-day flaw exploited in the wild

Jun 9, 2026 // 11:17

Google has released emergency updates to patch another Chrome zero-day vulnerability that has been exploited in the wild, the fifth such flaw patched since the […]

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

Jun 9, 2026 // 11:17

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a high-severity flaw impacting BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) catalog, citing […]

NFCShare Android malware spreads via fake banking app updates on GitHub

Jun 9, 2026 // 01:16

New variants of the NFCShare Android malware are being distributed as fake updates for legitimate banking apps hosted on GitHub. The malware has evolved and […]

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Jun 9, 2026 // 00:57

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud supply-chain attack that delivered malware designed to steal […]

New Apple feature automatically changes your compromised passwords

Jun 9, 2026 // 00:57

At WWDC 2026, Apple announced an Apple Intelligence-powered feature that can automatically fix weak and compromised passwords. Right now, Safari and the built-in Apple Passwords […]

SoFi confirms third-party data breach at Hong Kong subsidiary

Jun 9, 2026 // 00:56

SoFi Hong Kong is warning that it suffered a data breach after hackers gained access to a database at a third-party vendor containing customer information. […]

One-Character Linux Kernel Flaw Enables Local Root Access, Exploits Now Public

Jun 9, 2026 // 00:51

Security researchers have published a detailed, working exploit for a Linux kernel use-after-free that lets an unprivileged local user escalate to root and break out […]

Previous 1 … 273 274 275 276 277 … 388 Next