CVSS 10.0 LXD, MicroCloud Flaw Lets Attackers Impersonate Trusted Clients Without a Private Key

November 1, 2026 at 02:21PM A critical flaw in Canonical's LXD and MicroCloud let an attacker log in as a trusted client with…

Hackers Steal About $2.7 Million From Polymarket Traders via Hijacked DebugBear Script

November 1, 2026 at 12:55PM Malicious code on the website of prediction market Polymarket sold some signed-in traders' positi…

FBI Links North Korea's TraderTraitor to Record $6.43 Billion Binance Crypto Heist

November 1, 2026 at 12:14PM The U.S. Federal Bureau of Investigation (FBI) has officially attributed the theft of more than $6 bi…

Syrian Hacker Behind Fake Tweet That Triggered $136 Billion Market Drop Gets 42 Months in Prison

October 30, 2026 at 04:10PM Ahmad Umar Agha, a Syrian Electronic Army hacker known online as "Th3Pr0," has been sentenc…

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

October 30, 2026 at 01:15PM Drupal has warned that threat actors are exploiting a "highly critical" security flaw in it…

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

October 30, 2026 at 12:57PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws…

Binance Suffers Security Breach Affecting $6.3 Billion in Assets, Nearly $3 Billion Frozen

October 30, 2026 at 09:44AM Cryptocurrency giant Binance said on Thursday that a "security incident" on its platform ha…

ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories

October 30, 2026 at 12:41AM Some attacks take real skill. Others just need someone to leave a door open. This week has both. Expo…

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

October 29, 2026 at 11:20AM Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2She…

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

October 28, 2026 at 11:38PM The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted co…

Researcher Reveals How Logic Bugs Alone Cracked Microsoft Edge in $175,000 Pwn2Own Win

October 28, 2026 at 09:53PM A chain of logic flaws, with no memory corruption, can turn a malicious web page into code running on…

Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

October 28, 2026 at 11:12AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two vulnerabilities…