SecurityWeek (1 hour ago)
Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.
Read the full story on SecurityWeek.
Attackers have started exploiting a maximum-severity GitLab vulnerability patched earlier this month, according to the US Cybersecurity and Infrastructure Security Agency (CISA).
Lazarus is breaking its own records year after year but Binance says user funds are SAFU.
The alert is critical. The fix is known. And the ticket sits in a queue for days. Security teams understand the risk, but the people who keep applications available need proof that the change won’t break anything. Their concerns are practical. An IPS protection could block legitimate traffic.
Binance has disclosed that $6.3 billion worth of crypto funds have been stolen from the platform, in what’s believed to be the biggest cryptocurrency hack on record.
Multiple crypto-tracing firms say notorious North Korean hackers TraderTraitor may be behind the largest digital heist in history—with billions of crypto likely gone for good.
Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.
Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.
Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.
An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.
Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.
71 active sources
26 Turkish · 45 English
All sources
