Cybersecurity
One-Click VS Code Attack Exposes GitHub OAuth Tokens
Cybersecurity researchers have disclosed a one-click attack via Microsoft Visual Studio Code (VS Code) that makes it possible to steal a user's GitHub token. "J
#vulnerabilities
21 articles
Cybersecurity
Windows 11 and Edge Exploited at Pwn2Own Berlin 2026
On the first day of Pwn2Own Berlin 2026, security researchers collected $523,000 in cash awards after exploiting 24 unique zero-days. [...]
Cybersecurity
Supply Chain Vulnerabilities Persist as Attackers Exploit Familiar Flaws
You scroll past one incident and see another that feels familiar, like it should have been fixed years ago, but it still works with small changes. Same bugs. Sa
Cybersecurity
Apple Fixes iOS Flaw That Retained Deleted Notifications
Apple has rolled out a software fix for iOS and iPadOS to address a Notification Services flaw that stored notifications marked for deletion on the device. The
Cybersecurity
22 Critical Flaws Found in Serial-to-IP Converters
Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters from Lantronix and Silex that could be exploited t
Cybersecurity
CISA Adds 8 Critical Exploited Vulnerabilities to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog,
Cybersecurity
10,000+ Zimbra Servers Face Active XSS Attack Threat
Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw. [
Cybersecurity
NIST Restructures CVE Database After Vulnerability Submissions Skyrocket
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed
Cybersecurity
Apache ActiveMQ Flaw Exploited in Wild, Added to CISA Watch List
A recently disclosed high-severity security flaw in Apache ActiveMQ Classic has come under active exploitation in the wild, per the U.S. Cybersecurity and
Cybersecurity
Critical Security Threats Surge: Defender Flaw, Excel Exploit
You know that feeling when you open your feed on a Thursday morning and it's just... a lot? Yeah. This week delivered. We've got hackers getting creative in way
Cybersecurity
Cisco Patches Critical Flaws in Identity and Webex Services
Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution
Cybersecurity
Microsoft Patches 169 Vulnerabilities in Major Security Update
Microsoft on Tuesday released updates to address a record 169 security flaws across its product portfolio, including one vulnerability that has b
Cybersecurity
Self-Spreading npm Attack Targets Developer Credentials
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages publish
Cybersecurity
CISA Flags 6 Critical Vulnerabilities Under Active Attack
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added half a dozen security flaws to its Known Exploited Vulnerabilities (KEV) catalo
Cybersecurity
Critical Vulnerabilities Expose Popular Software to Active Attacks
This week had real hits. The key software got tampered with. Active bugs showed up in the tools people use every day. Some attacks didn’t ev
Cybersecurity
Security Threats Escalate: Pre-Auth Chains and Android Rootkits
The latest ThreatsDay Bulletin is basically a cheat sheet for everything breaking on the internet right now. No corporate fluff or boring lectures her
Cybersecurity
Hackers Exploit Next.js Flaw to Breach 766 Sites, Steal Credentials
A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal
Cybersecurity
Fortinet Issues Emergency Patch for Critical FortiClient EMS Flaw
Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vuln
Cybersecurity
WordPress Plugin Suite Compromised in Mass Malware Campaign
More than 30 WordPress plugins in the EssentialPlugin package have been compromised with malicious code that allows unauthorized access to websites running them
Cybersecurity
Cisco Patches Critical IMC Flaw With 9.8 CVSS Score
Cisco has released updates to address a critical security flaw in the Integrated Management Controller (IMC) that, if successfully exploited, could allow a
Cybersecurity
Microsoft March Patch Tuesday: 77 Vulnerabilities Fixed
Microsoft Corp. today pushed security updates to fix at least 77 vulnerabilities in its Windows operating systems and other software. There are no pressing "zer