ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More

August 20, 2026 at 10:53PM A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. S…

40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets

August 20, 2026 at 02:12PM A set of 40 Mozilla Firefox extensions has been found to engage in cryptocurrency wallet theft by masq…

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

August 20, 2026 at 11:34AM Cybersecurity researchers have disclosed details of a critical flaw in the Elementor Pro WordPress plu…

OpenAI Pauses Frontier RL Training as It Tightens Defenses Against Unsafe AI Behavior

August 19, 2026 at 11:36PM OpenAI on Tuesday revealed that it paused reinforcement learning (RL) training for its latest artifici…

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data

August 19, 2026 at 11:09AM A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in …

Ransom Busters Claims It Hacked Ransomware Servers, Asks Victims for Up to $60,000

August 18, 2026 at 10:28PM A ransomware affiliate calling itself Ransom Busters has been spotted proactively sending emails to vi…

Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects

August 18, 2026 at 02:33AM GitLab has released security updates to address a critical vulnerability impacting its Community Editi…

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

August 18, 2026 at 12:14AM Cybersecurity researchers at Wiz have disclosed a new GitHub Actions workflow injection vulnerability …

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

August 17, 2026 at 11:11PM Cybersecurity researchers have traced the continued evolution of the Cavern (aka Cav3rn) command-and-c…

North Korean Remote Workers Are Infiltrating Government and Businesses: How to Expose Them Before Hiring

August 13, 2026 at 05:15PM Companies are used to thinking about attackers as outsiders trying to break in. North Korean IT worke…

Attackers Exploit SharePoint Authentication Bypass After Public PoC Release

August 13, 2026 at 11:39AM Threat actors have begun to exploit a newly disclosed Microsoft SharePoint vulnerability following the…

Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor

August 12, 2026 at 11:09PM The North Korean threat actor known as Lazarus Group has been attributed to the zero-day exploitation …