#news


China-Linked Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy GRIMWEDGE

Sep 15, 2026 // 11:32

A Chinese threat actor has been attributed to a spear-phishing campaign that exploits recently patched security flaws in Google Chrome and Microsoft Windows to deliver […]

Cisco Secure Email Gateway Flaw Exploited in the Wild, Enables Root Command Execution

Sep 15, 2026 // 11:31

Cisco has warned that a new critical vulnerability impacting AsyncOS Software for Cisco Secure Email Gateway has come under active exploitation in the wild. The […]

LiteSpeed Enterprise Flaw Could Let One Hosting Account Gain Root Access on a Shared Server

Sep 15, 2026 // 11:31

A critical vulnerability in LiteSpeed Web Server Enterprise could let a low-privilege website user gain root access on a shared-hosting server, cPanel warned in an […]

Hackers hijack HBO Max Reddit account to push malware in ClickFix ads

Sep 14, 2026 // 23:43

Hackers compromised HBO Max’s official Reddit account and used it to push malicious ads that launched ClickFix attacks to infect Windows and macOS devices with […]

Twitch extension with 30K installs exposes users’ OAuth tokens

Sep 14, 2026 // 23:43

A browser extension called Twitch Enhanced Viewer | JeetBot, available in the official Chrome and Firefox stores, sends users’ Twitch OAuth session tokens to a […]

Homebrew 7.0.0 gets built-in GUI, better security controls

Sep 14, 2026 // 23:43

Homebrew package manager version 7.0.0 has been released with a built-in vulnerability scanner, stronger security controls, and the full release of its native BrewUI graphical […]

Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records

Sep 14, 2026 // 23:43

Japan’s Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. The agency says […]

Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports

Sep 14, 2026 // 23:22

A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said […]

3BB Attacker Used MeshCentral Backdoor for Root Access, Targeted Subscriber Credentials

Sep 14, 2026 // 23:22

An attacker was operating inside the network of 3BB, one of Thailand’s largest broadband providers, and maintained remote control of internal machines using a legitimate […]

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

Sep 14, 2026 // 20:01

A Chinese threat actor tracked as Red Heron has been attributed to the rapid exploitation of a recently disclosed security vulnerability in Gitea to compromise […]

Previous 1 … 35 36 37 38 39 … 388 Next