The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added five security flaws to its Known Exploited Vulnerabilities (KEV) catalog, following their abuse by a China-linked threat actor known as Flax Typhoon.
Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.
No word on exploitation status, but a 9.5 severity score suggests time is of the essence
As enterprises race to deploy autonomous AI agents to accelerate business, a new report reveals they are tethered to security architectures built for a different era.
The NBA legend, alongside other pro-basketball players, came out to demonstrate the blocking power of Next Gen Antivirus in a new way
Anthropic is offering open-source projects a new way to check for vulnerabilities with its OSS Scanner.
A Ukrainian-Russian dual citizen has pleaded guilty to running a massive money laundering operation that laundered millions for cybercriminals worldwide.
Approximately 66,000 unique entries are expected to emerge in 2026 , many boosted or even created by AI.
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.
A bug in GoBalance, a tool many dark-web sites use to stay reachable during attacks, lets anyone work out the secret key that controls a site’s .onion address using only public information, and then take that address over.
Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure.
Citrix has warned IT administrators to patch systems immediately against a new critical vulnerability affecting NetScaler ADC networking appliances and NetScaler Gateway secure remote access solutions.
Günümüzün siber saldırıları artık tek bir olayla sınırlı kalmıyor. Şüpheli bir oturum açma işlemi, bir uç nokta davranışı veya olağan dışı bir erişim talebi çok daha geniş bir operasyonun yalnızca tek bir parçasını oluşturabiliyor.
Citrix has released patches for yet another critical security flaw impacting NetScaler ADC and NetScaler Gateway that could result in remote code execution or denial-of-service (DoS) under certain conditions.
The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.
$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding tools.
The Pwn2Own Ireland 2026 hacking contest has concluded, with hackers collecting $1,262,000 in rewards after exploiting 98 zero-day flaws.
KVKK, Yıldız Teknik Üniversitesi’nde veri ihlali yaşandığını bildirdi.
iVerify released a report today detailing P7 DarkSword, a new variant of the malware associated with the DarkSword iPhone exploit chain uncovered earlier this year. Here are the details. more…
Documents obtained by Democracy Forward show that ICE looked into feeding voter roll data into the ELITE tool, normally used to identify targets for deportation.
Infecting devices from 2021 until the FBI stepped in
The FBI has seized seven domains used by Chinese state-sponsored hackers known as Flax Typhoon to operate two hacking tools, MicroScan and FishHub, used in attacks that breached critical infrastructure and other organizations worldwide.
A now-patched vulnerability in AWS Bedrock AgentCore could allow an attacker to use one AI chatbot to take over an organization’s entire fleet.
72 aktif kaynak
27 Türkçe · 45 İngilizce
Tüm kaynaklar
