Cyber Security

JaredFromSubway MEV bot hacked in $15 million crypto...

The JaredFromSubway Ethereum MEV (Maximal Extractable Value) bot suffered a $...

FFmpeg fixes PixelSmash flaw in widely used video de...

A newly disclosed FFmpeg flaw dubbed 'PixelSmash' could be exploited for remo...

FortiBleed campaign used custom FortiGate sniffer to...

Security firm SOCRadar says the large-scale FortiBleed campaign targeting For...

ShapedPlugin WordPress Pro Plugins Backdoored in Sup...

Multiple WordPress plugins from ShapedPlugin were compromised in a supply cha...

Microsoft says Windows 11 26H2 is coming soon, detai...

Microsoft has confirmed that Windows 11 version 26H2 will be the next feature...

Microsoft fixes AutoGen Studio flaw that enabled cod...

A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface...

Crypto Heist Fueled by Elaborate Fake Reputation-Boo...

Attackers are using multiple online channels — including GitHub, YouTube, and...

Researchers Detail DifyTap Flaws in Dify That Could ...

Cybersecurity researchers have disclosed details of four vulnerabilities in D...

A Glimpse into the “Search Your Target” Market for S...

Attackers no longer need to sift through massive credential dumps. They can p...

29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cl...

A heap over-read in the Squid web proxy can leak another user's cleartext HTT...

New OXLOADER Loader Uses Malicious Google Ads to Del...

Cybersecurity researchers have disclosed details of a new campaign that deliv...

Google Sets Sept. 30 Deadline for Android Developer ...

Google has set September 30, 2026, as the day it begins enforcing Android dev...

Stop Your Legacy Infrastructure from Hijacking Your ...

Earlier this month, I spoke at the Gartner Security & Risk Management Summit ...

⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botne...

It’s Monday again. This week’s threat list looks painfully familiar: abused ...

Canada’s Spy Agency Used First-of-Its-Kind Warrant t...

Canada's spy service got a judge's permission to reach into infected servers,...

23 ClawHub plugins squatting official scopes expose ...

Plugin registries for AI agents use npm-style scopes like @openclaw/ and @cla...