TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor

August 30, 2026 at 01:06PM Microsoft has disclosed details of a new ClickFix variant, dubbed TerminalFix, that aims to trick user…

Cosmos EVM Flaw Exploited After Cosmos Labs Knew Every Blockchain Running It Was Vulnerable

August 29, 2026 at 02:08AM Cosmos Labs has warned that a critical balance-handling flaw in the shared Cosmos EVM module was explo…

ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

August 28, 2026 at 09:26PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security…

Critical cPanel Flaw Could Let One Hosting Customer Take Root Control of a Whole Server

August 28, 2026 at 03:15PM cPanel has released patches for a security flaw affecting domain parking and addon domain functionalit…

APT28-Linked HOOKEDGE Backdoor Targets European Government and Diplomatic Organizations

August 28, 2026 at 01:50PM Cybersecurity researchers have flagged a fresh set of campaigns targeting government and diplomatic or…

OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face

August 28, 2026 at 12:06AM OpenAI on Wednesday revealed that reward hacking was a key driver behind the artificial intelligence (…

New GPUThor Rowhammer Defeats ECC on NVIDIA RTX A6000 to Gain Host Root Access

August 27, 2026 at 01:43PM Academic researchers have disclosed a Rowhammer attack impacting NVIDIA workstation GPUs with GDDR6 me…

CISA Adds Six Exploited Flaws to KEV, Including NetScaler, Linux, and SQL Server Bugs

August 27, 2026 at 12:35PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added six flaws to its K…

Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler

August 26, 2026 at 09:05PM Cybersecurity researchers have discovered additional infrastructure and previously undocumented malwar…

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode

August 26, 2026 at 12:42PM An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEE…

Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes

August 26, 2026 at 11:17AM Cybersecurity researchers have disclosed details of a phishing-as-a-service (PhaaS) platform built to …

U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches

August 25, 2026 at 11:47PM The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of w…