Arch Linux AUR Packages Hijacked to Drop Infostealer and Rootkit
More than 400 Arch Linux AUR packages were reported compromised in an Atomic Arch supply-chain attack that pulled malicious npm and bun dependencies into...
Author profile
Emma Davis
Content editor and security writer focused on making malware-removal and scam-prevention guides easier to understand. Emma reviews structure, clarity, and source consistency before articles are published.
1,078 articles
Editorial review
Reader clarity
Security guidance
Published work
Recent articles by Emma Davis
News · June 12, 2026
Langflow CVE-2026-5027 Exploited: Patch AI Workflow Servers
Attackers are exploiting Langflow CVE-2026-5027, a path traversal file-write flaw that can become remote code execution on exposed AI workflow servers.
News · June 11, 2026
Ivanti Sentry CVE-2026-10520: Root RCE Is Now Exploited
CISA added Ivanti Sentry CVE-2026-10520 to KEV after public PoC-driven exploitation attempts. Patch now and review exposed gateways for compromise.
News · June 11, 2026
Oracle PeopleSoft CVE-2026-35273: Critical RCE Flaw Emerges During ShinyHunters Attacks
Oracle issued an emergency alert for PeopleSoft CVE-2026-35273, a critical unauthenticated RCE flaw, as ShinyHunters-linked PeopleSoft data-theft attacks are reported.
News · June 11, 2026
Check Point VPN CVE-2026-50751: IKEv1 Bypass Is Exploited by Ransomware
Check Point CVE-2026-50751 is an exploited IKEv1 VPN authentication bypass tied to ransomware activity. Patch, disable legacy IKEv1 paths, and audit logs back to...
News · June 8, 2026
Meta AI Support Hack Exposed 20,225 Instagram Accounts
Meta says 20,225 Instagram accounts were potentially accessed after attackers abused an AI-assisted account recovery support tool. Here is what users should check now.
News · June 7, 2026
C0XMO Gafgyt Botnet Exploits DD-WRT Routers Through UPnP Flaw
C0XMO, a new Gafgyt botnet variant, is abusing an old DD-WRT UPnP buffer overflow to spread across routers and IoT devices. Update firmware, disable...
News · June 7, 2026
Silent Ransom Group Targets Law Firms with Fake IT Support Calls
Mandiant and the FBI warn that Silent Ransom Group is using fake IT support calls, remote access tools, and even in-person impostors to steal...
News · June 6, 2026
Miasma Worm Hits Microsoft GitHub Repos Through AI Coding Tools
The Miasma supply-chain worm has moved from poisoned package installs to repository config files that can run through AI coding tools and IDEs. Developers...
News · June 5, 2026
Everest Forms Pro CVE-2026-3300: WordPress RCE Flaw Is Exploited
Attackers are exploiting CVE-2026-3300, a critical Everest Forms Pro WordPress RCE flaw tied to the Complex Calculation feature. Update to a fixed release and...
News · June 5, 2026
Cisco SD-WAN CVE-2026-20245: Exploited Root Flaw Has No Patch Yet
Cisco says CVE-2026-20245 is being exploited in Catalyst SD-WAN Manager and has no dedicated patch yet. SD-WAN teams should collect admin-tech logs, upgrade related...
News · June 4, 2026
Cisco Unified CM CVE-2026-20230: Patch WebDialer SSRF Flaw with Public PoC
Cisco has patched CVE-2026-20230, a Unified CM and Unified CM SME WebDialer SSRF flaw with public proof-of-concept code. Admins should upgrade fixed releases and...
