A critical Windows protection mechanism failure that allows for the zero-click theft of hashed credentials has been added to the […]
CISA adds zero-click Windows NTLM hash leak vulnerability to KEV catalog Read More »
A sophisticated Python-based backdoor is targeting developer workstations to harvest browser cookies and cloud access tokens. This malware utilizes legitimate
DEEP DOOR Python backdoor utilizes tunneling services for stealthy exfiltration Read More »
A critical remote code execution vulnerability in the world most popular code hosting platform allowed authenticated users to compromise backend
Critical GitHub RCE vulnerability CVE-2026-3854 exposed millions of repositories Read More »
A critical authentication bypass vulnerability has been identified in a foundational web hosting management platform, exposing thousands of websites to
Critical cPanel authentication bypass allows unauthenticated server takeover Read More »
Two critical vulnerabilities impacting core Windows components and popular remote management software have been added to the federal list of
CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to KEV Read More »
A monumental shift in the security landscape has occurred as a major web browser addressed nearly 300 vulnerabilities identified by
Firefox 150 patches 271 zero-days discovered by Claude Mythos AI model Read More »
Remediation warnings for the North Korean-linked Axios supply chain strike have shifted to a full assume-breach posture for affected development
Axios npm compromise remediation alert: Assume breach for cloud access keys Read More »
Attackers are industrializing the exploitation of the BlueHammer privilege escalation flaw to bypass endpoint detection and response (EDR) platforms. By
Microsoft Defender BlueHammer privilege escalation used to dismantle EDR telemetry Read More »
A critical pre-authentication SQL injection vulnerability in the LiteLLM AI gateway is currently being exploited in the wild to exfiltrate
Critical LiteLLM SQL injection CVE-2026-42208 exploited to steal AI master keys Read More »
A state-linked threat actor is utilizing AI-accelerated development to generate thousands of unique malware variants to bypass traditional detection mechanisms.
APT36 weaponizes AI coding tools to flood networks with unique Vibeware variants Read More »
