DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root

4 weeks ago

DirtyClone: a Linux kernel privilege escalation that silently rewrites executables in memory, leaving no disk trace. Patch now. JFrog Security…

Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware

4 weeks ago

Chinese-speaking APT CL-STA-1062 targeted Southeast Asian government and energy networks open-source tools, and a new TinyRCT backdoor. Palo Alto Networks…

Activist Phone Hacked With Cellebrite After Russia Contract Cancellation

1 month ago

Russian authorities used Cellebrite tools to unlock an activist’s iPhone and analyze private data despite canceled support, raising abuse concerns.…

U.S. CISA adds Cisco and PTC Windchill and FlexPLM flaws to its Known Exploited Vulnerabilities catalog

1 month ago

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco and PTC Windchill and FlexPLM flaws to its Known Exploited Vulnerabilities…

Third-Party Breach at Polymarket Leads to $2.94M Crypto Theft

1 month ago

Polymarket confirmed hackers stole funds from some users after attackers injected malicious code through a compromised third-party vendor. Polymarket confirmed…

macOS.Gaslight: North Korea-Linked Malware That Tries to Gaslight the Analyst

1 month ago

macOS.Gaslight: DPRK Rust implant for Mac with a prompt injection payload designed to fool AI-based malware analysts. SentinelLabs researchers spotted…

Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla

1 month ago

Tata Electronics confirmed a data breach after hackers claimed to steal 630GB of data, including alleged Apple supplier and Tesla…

Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet

1 month ago

Curl fixed 18 vulnerabilities, including a 25-year-old bug, with issues spanning auth bypass, memory safety, and host validation in libcurl.…

Inside Mistic, the New Stealth Backdoor in Ransomware Intrusions

1 month ago

Mistic is a stealthy backdoor used by KongTuke-linked actors to keep long-term access in ransomware-targeted networks. Mistic is the kind…

Cisco Catalyst SD-WAN Zero-Day CVE-2026-20245 Exploited Months Before Disclosure

1 month ago

Hackers exploited Cisco Catalyst SD-WAN flaw CVE-2026-20245 as a zero-day months before disclosure, enabling privileged command execution. Google-owned Mandiant reported…

This website uses cookies.