Code Defence

A sophisticated Python-based backdoor is targeting developer workstations to harvest browser cookies and cloud access tokens. This malware utilizes legitimate

A critical remote code execution vulnerability in the world most popular code hosting platform allowed authenticated users to compromise backend

A critical authentication bypass vulnerability has been identified in a foundational web hosting management platform, exposing thousands of websites to

Two critical vulnerabilities impacting core Windows components and popular remote management software have been added to the federal list of

A monumental shift in the security landscape has occurred as a major web browser addressed nearly 300 vulnerabilities identified by

Remediation warnings for the North Korean-linked Axios supply chain strike have shifted to a full assume-breach posture for affected development

Attackers are industrializing the exploitation of the BlueHammer privilege escalation flaw to bypass endpoint detection and response (EDR) platforms. By

A critical pre-authentication SQL injection vulnerability in the LiteLLM AI gateway is currently being exploited in the wild to exfiltrate

A critical security update for the Android ecosystem has been released to address a zero-day vulnerability currently being exploited across

A critical race condition in a common Linux package management component is being exploited to achieve local privilege escalation. This