CISA Adds Actively Exploited Linux Root Access Bug CVE-2026-31431 to KEV

May 3, 2026 at 11:56AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a recently disclosed secu…

Trellix Confirms Source Code Breach With Unauthorized Repository Access

May 2, 2026 at 12:11PM Cybersecurity company Trellix has announced that it suffered a breach that enabled unauthorized access to …

30,000 Facebook Accounts Hacked via Google AppSheet Phishing Campaign

May 1, 2026 at 11:39PM A newly discovered Vietnamese-linked operation has been observed using a Google AppSheet as a "phishi…

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

May 1, 2026 at 07:32PM Cybersecurity researchers have disclosed details of a new China-aligned espionage campaign targeting gover…

Two Cybersecurity Professionals Get 4-Year Sentences in BlackCat Ransomware Attacks

May 1, 2026 at 03:26PM The U.S. Department of Justice (DoJ) on Thursday announced the sentencing of two cybersecurity professiona…

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

May 1, 2026 at 03:13PM A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subse…

EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades

April 30, 2026 at 05:00PM Intro A sophisticated, high-resilience malicious campaign was identified by Atos Threat Research Cent…

New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions

April 30, 2026 at 02:54PM Cybersecurity researchers have disclosed details of a Linux local privilege escalation (LPE) flaw tha…

Google Fixes CVSS 10 Gemini CLI CI RCE and Cursor Flaws Enable Code Execution

April 30, 2026 at 12:37PM Google has addressed a maximum severity security flaw in Gemini CLI -- the "@google/gemini-cli&q…

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

April 29, 2026 at 02:16PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws …

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure

April 29, 2026 at 11:04AM In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly discl…

Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

April 28, 2026 at 11:49PM Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHu…