Arch Linux AUR Packages Hijacked to Drop Infostealer and Rootkit
More than 400 Arch Linux AUR packages were reported compromised in an Atomic Arch supply-chain attack that pulled malicious npm and bun dependencies into...
Scam library
Phishing Scams: Tips to Spot and Prevent
Recent phishing, fake store, and scam website reports, arranged for quick checking without oversized preview images.
Langflow CVE-2026-5027 Exploited: Patch AI Workflow Servers
Attackers are exploiting Langflow CVE-2026-5027, a path traversal file-write flaw that can become remote code execution on exposed AI workflow servers.
Ivanti Sentry CVE-2026-10520: Root RCE Is Now Exploited
CISA added Ivanti Sentry CVE-2026-10520 to KEV after public PoC-driven exploitation attempts. Patch now and review exposed gateways for compromise.
Oracle PeopleSoft CVE-2026-35273: Critical RCE Flaw Emerges During ShinyHunters Attacks
Oracle issued an emergency alert for PeopleSoft CVE-2026-35273, a critical unauthenticated RCE flaw, as ShinyHunters-linked PeopleSoft data-theft attacks are reported.
Check Point VPN CVE-2026-50751: IKEv1 Bypass Is Exploited by Ransomware
Check Point CVE-2026-50751 is an exploited IKEv1 VPN authentication bypass tied to ransomware activity. Patch, disable legacy IKEv1 paths, and audit logs back to...
Tosowin Reviewed: Real Deal or Total Ripoff? Read This First
You ever land on a crypto site and get that weird déjà vu feeling, like you've seen it before but can't place where? That's...
Meta AI Support Hack Exposed 20,225 Instagram Accounts
Meta says 20,225 Instagram accounts were potentially accessed after attackers abused an AI-assisted account recovery support tool. Here is what users should check now.
C0XMO Gafgyt Botnet Exploits DD-WRT Routers Through UPnP Flaw
C0XMO, a new Gafgyt botnet variant, is abusing an old DD-WRT UPnP buffer overflow to spread across routers and IoT devices. Update firmware, disable...
Silent Ransom Group Targets Law Firms with Fake IT Support Calls
Mandiant and the FBI warn that Silent Ransom Group is using fake IT support calls, remote access tools, and even in-person impostors to steal...
Miasma Worm Hits Microsoft GitHub Repos Through AI Coding Tools
The Miasma supply-chain worm has moved from poisoned package installs to repository config files that can run through AI coding tools and IDEs. Developers...
Everest Forms Pro CVE-2026-3300: WordPress RCE Flaw Is Exploited
Attackers are exploiting CVE-2026-3300, a critical Everest Forms Pro WordPress RCE flaw tied to the Complex Calculation feature. Update to a fixed release and...
Cisco SD-WAN CVE-2026-20245: Exploited Root Flaw Has No Patch Yet
Cisco says CVE-2026-20245 is being exploited in Catalyst SD-WAN Manager and has no dedicated patch yet. SD-WAN teams should collect admin-tech logs, upgrade related...
