#via


Ghostscript flaw lets hackers hijack servers via PDF uploads

Oct 14, 2026 // 00:36

A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. The flaw […]

Denmark Says Attackers Accessed CPR Data for 8.8 Million People via Company Account

Oct 6, 2026 // 12:48

Unauthorized parties have gained access to the names, addresses, and personal identification numbers of about 8.8 million people, living and dead, in Denmark’s national population […]

Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures

Sep 30, 2026 // 18:00

Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures […]

Bitget hacked via zero-day in third-party security products

Sep 30, 2026 // 14:17

Cryptocurrency exchange Bitget revealed today that attackers who stole $387.5 million last week breached its systems after exploiting a zero-day flaw in third-party security products. […]

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

Sep 23, 2026 // 16:57

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based […]

Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input

Sep 23, 2026 // 10:07

A new security vulnerability in Next.js could allow attackers to run code on a server via ImageResponse, the feature that generates Open Graph and other […]

WordPress Comment2Shell Flaw Can Turn Anonymous Comment XSS Into RCE via Admin Session

Sep 22, 2026 // 13:13

A new flaw in WordPress core let an anonymous visitor leave a comment that planted a hidden script on the page. If a logged-in administrator […]

Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws

Sep 19, 2026 // 14:51

Three researchers at the security firm Hacktron used Anthropic’s Claude Opus 5 to chain two flaws and take over the ChatGPT and Codex accounts of […]

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Sep 18, 2026 // 23:48

Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new […]

Critical Unbound DNSSEC Validator Flaw Could Allow RCE via a Malicious DNS Zone

Sep 17, 2026 // 18:51

Every release of the Unbound DNS resolver before 1.26.1 has a critical heap overflow in its DNSSEC validator, maintainer NLnet Labs said in an advisory […]

1 2 3 … 13 Next