Attackers are industrializing the exploitation of the BlueHammer privilege escalation flaw to bypass endpoint detection and response (EDR) platforms. By […]
Microsoft Defender BlueHammer privilege escalation used to dismantle EDR telemetry Read More »
Remediation warnings for the North Korean-linked Axios supply chain strike have shifted to a full assume-breach posture for affected development
Axios npm compromise remediation alert: Assume breach for cloud access keys Read More »
A critical pre-authentication SQL injection vulnerability in the LiteLLM AI gateway is currently being exploited in the wild to exfiltrate
Critical LiteLLM SQL injection CVE-2026-42208 exploited to steal AI master keys Read More »
Organizations have until the end of today to remediate a critical prototype pollution vulnerability in the world most popular PDF
CISA KEV deadline today for actively exploited Adobe Reader prototype pollution Read More »
A state-linked threat actor is utilizing AI-accelerated development to generate thousands of unique malware variants to bypass traditional detection mechanisms.
APT36 weaponizes AI coding tools to flood networks with unique Vibeware variants Read More »
A critical race condition in a common Linux package management component is being exploited to achieve local privilege escalation. This
Critical Linux Pack2TheRoot race condition grants unprivileged root access Read More »
A critical security update for the Android ecosystem has been released to address a zero-day vulnerability currently being exploited across
Google issues record-breaking Android update to patch Qualcomm zero-day Read More »
A critical Server-Side Request Forgery vulnerability in a popular toolkit for deploying large language models is being actively weaponized to
LMDeploy SSRF vulnerability CVE-2026-33626 exploited within 13 hours of disclosure Read More »
Two critical vulnerabilities in a popular cloud migration and backup utility are being exploited to execute unauthorized commands on backup
Rclone unauthenticated RCE vulnerabilities targeted in mass cloud harvesting campaign Read More »
A previously undocumented threat actor is leveraging social engineering via internal collaboration platforms to bypass traditional email security perimeters. This
UNC6692 impersonates IT help desk via Microsoft Teams to deploy SNOW malware Read More »
