Malicious Sites Track Users Through SSD Timing Side-Channel Attacks 2026-05-28 True Lucas Martin True Hackers Use LLM Agent to Pivot From marimo RCE to Internal Database 2026-05-28 True Varshini True Critical Notepad++ Vulnerability Enables Arbitrary Code Execution 2026-05-28 True Lucas Martin True Critical Roundcube Flaw Allows Attackers to Inject SQL Queries 2026-05-28 True Lucas Martin True Preinstalled Motorola App Hijacks Amazon to Inject Affiliate Codes 2026-05-28 True Lucas Martin True Threat Actor’s GitHub Token Leaked by AI-Generated npm Malware 2026-05-28 True Varshini True ClearFake Uses BSC Testnet Smart Contracts for Resilient C2 Operations 2026-05-28 True Varshini True PureLogs Malware Variant Abuses MSBuild.exe for Process Hollowing Attacks 2026-05-28 True Varshini True BadHost Exploit Exposes Sensitive AI Agent Server Endpoints 2026-05-27 True Lucas Martin True CISA Warns of Exploited LiteSpeed cPanel Plugin Flaw 2026-05-27 True Lucas Martin True TeamPCP Hackers Weaponize LiteLLM for Credential Harvesting Attacks 2026-05-27 True Varshini True 300+ Fake Domains Used in GHOST STADIUM Campaign Targeting World Cup Fans 2026-05-27 True Varshini True Tycoon 2FA AiTM Kit Targets Entra ID and Google Workspace In MFA Bypass Campaigns 2026-05-27 True Varshini True New BTMOB Malware Enables Remote Control of Android Devices 2026-05-27 True Lucas Martin True Windows Kernel Flaw Lets Attackers Modify Memory Counters 2026-05-27 True Lucas Martin True Grandoreiro Malware Campaign Hits Banks and Latin American Companies 2026-05-27 True Varshini True Cybercriminals Weaponize AI App Installers to Deliver DinDoor Backdoor 2026-05-27 True Varshini True Malicious npm RAT Campaign Delivers Persistent Backdoor Access 2026-05-27 True Varshini True Microsoft SharePoint Flaw Enables Remote Code Execution Attacks 2026-05-26 True Lucas Martin True India’s CERT-In Urges Rapid Patching of Exposed System Vulnerabilities 2026-05-26 True Varshini True ConnectWise Automate Flaw Allows Attackers To Bypass Security Checks 2026-05-26 True Lucas Martin True Critical Memcached SASL Flaw Lets Attackers Infer Usernames 2026-05-26 True Lucas Martin True Threat Actors Abuse Fileless Execution to Spread Quasar Linux RAT 2026-05-26 True Varshini True China-Linked Hackers Target Southeast Asian Edge Routers 2026-05-26 True Varshini True Apache CXF LDAP Injection Flaw Exposes Arbitrary Certificates 2026-05-26 True Lucas Martin True PuTTY 0.84 Fixes SSH KEX Crashes and Telnet Spoofing Flaw 2026-05-26 True Lucas Martin True Ghost CMS Flaw Abused to Poison 700 Websites With ClickFix Malware 2026-05-26 True Varshini True Claude Mythos Expansion Planned Through Claude Code, Security Tools 2026-05-26 True Lucas Martin True Russian Hacker Used Jailbroken Gemini to Steal Crypto Wallets 2026-05-26 True Lucas Martin True Angular Language Service Flaws Enable Remote Code Execution 2026-05-26 True Lucas Martin True Cybercriminals Abuse SEO Poisoning To Spread Fake Gemini CLI Installers 2026-05-26 True Varshini True Unencrypted WhatsApp Chats Found on Apple macOS and iOS Devices 2026-05-25 True Lucas Martin True Threat Actor Compromised 233 Versions of Laravel-Lang Packages by Hacking 700 GitHub Repos 2026-05-23 True Lucas Martin True Attackers Abuse SEO Poisoning to Spread Fake Gemini and Claude Installers 2026-05-23 True Lucas Martin True Ubiquiti Issues Patches for Critical UniFi OS Privilege Escalation Vulnerabilities 2026-05-23 True Lucas Martin True LiteSpeed cPanel Plugin Zero-Day Exploited for Full Server Root Access. 2026-05-23 True Lucas Martin True Google Publishes Exploit Code for Unfixed Chromium Vulnerability 2026-05-22 True Lucas Martin True CISA adds Langflow Vulnerability to Known Exploited Vulnerabilities Catalog 2026-05-22 True Lucas Martin True Middle East Telecom Networks Exploited In Command-and-Control Campaign 2026-05-22 True Varshini True CISA Warns of Exploited Microsoft Defender 0-Day Flaws 2026-05-22 True Lucas Martin True CISA Warns of Exploited Trend Micro Apex One Flaw 2026-05-22 True Lucas Martin True Popular art-template npm Package Compromised In Watering-Hole Campaign 2026-05-22 True Varshini True Threat Actors Deploy Multi-Layer Persistence On Compromised FreePBX Servers 2026-05-22 True Varshini True Operation Dragon Whistle Targets Changzhou University With Malicious LNK Files 2026-05-22 True Varshini True Megalodon Malware Compromised 5,500+ GitHub Repositories. 2026-05-22 True Lucas Martin True Authorities Seize First VPN Service Linked to Ransomware Attacks 2026-05-22 True Lucas Martin True Critical Drupal Core Vulnerability Exposes Websites to Attacks 2026-05-21 True Lucas Martin True Hackers Exploit Microsoft Defender 0-Day Flaws To Launch Active Attacks 2026-05-21 True Varshini True Cybercriminals Abuse Microsoft Teams Brand To Spread ValleyRAT 2026-05-21 True Varshini True TamperedChef Malware Abuses Signed Productivity Apps To Deliver Stealers 2026-05-21 True Varshini True