Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

September 23, 2026 at 11:36PM Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Te…

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

September 23, 2026 at 10:23PM The private email address GitLab gives you for filing issues by email is a credential. Anyone who g…

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

September 23, 2026 at 11:00AM The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal…

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

September 22, 2026 at 11:28PM Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe…

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

September 22, 2026 at 11:01AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched secu…

Google Fined €403 Million Over GDPR Violations Tied to Location Data

September 21, 2026 at 10:27PM Google has been fined €403 million for breaking the EU's data protection law, the GDPR, in the …

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

September 21, 2026 at 07:45PM Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers …

ClickFix Lures Deploy ChainScript RAT Using Polygon to Rotate C2 Infrastructure

September 21, 2026 at 02:09PM Threat actors are leveraging ClickFix-like lures to deliver a previously undocumented remote access…

Jade Sleet Linked to Indian IT Provider Breach With FLATROOF and ROOFDECK Backdoors

September 21, 2026 at 11:36AM The North Korean threat actor known as Jade Sleet has been attributed to the compromise of an India…

CISA Flags Three Linux Kernel Vulnerabilities Exploited in the Wild

September 19, 2026 at 11:54AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added three security fla…

Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root

September 18, 2026 at 11:32PM A security researcher has released working exploit code for four Linux kernel flaws that each let a…

New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution

September 18, 2026 at 10:26PM WordPress today released patches to fix a new set of vulnerabilities in its core software, one of w…