Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

July 26, 2026 at 12:18AM A malvertising operation dubbed SourTrade is making victims' browsers build the final Windows execut…

DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts

July 25, 2026 at 03:23PM The operators of the DevMan ransomware-as-a-service (RaaS) scheme are maintaining a dedicated web platfo…

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

July 25, 2026 at 02:04PM Security researcher Yuhang Wu at depthfirst has published a working proof-of-concept (PoC) exploit that …

Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say

July 24, 2026 at 12:28PM Redis shipped seven security releases on July 23 after researchers published authenticated RCE PoCs for …

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

July 24, 2026 at 12:20PM The Computer Emergency Response Team of Ukraine (CERT-UA) has warned of a new campaign that involves the…

Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes

July 24, 2026 at 12:06AM A Russian state-supported espionage group spent months reading Western mailboxes through a then-unknown …

Check Point Patches Exploited SmartConsole Flaw Allowing Full Admin Access

July 23, 2026 at 12:04PM Check Point has released security updates to address multiple vulnerabilities impacting Security Managem…

GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

July 23, 2026 at 12:07AM Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity le…

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

July 22, 2026 at 08:31PM Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrob…

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

July 22, 2026 at 09:48AM OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol a…

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

July 22, 2026 at 12:16AM Apple has moved to address a security flaw in its Hide My Email service that enabled users' real ema…

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

July 21, 2026 at 11:59AM Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Pla…