New GoSerpent Malware Targets Southeast Asian Governments and Diplomats for Espionage

July 17, 2026 at 02:16PM Cybersecurity researchers have discovered a previously undocumented malware called GoSerpent that has be…

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

July 17, 2026 at 12:12PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a newly patched secur…

Two Scattered Spider Hackers Get 5.5 Years Each for £29 Million TfL Hack

July 16, 2026 at 10:39PM Owen Flowers, 18, and Thalha Jubair, 20, were each sentenced to five and a half years at Woolwich Crown …

Unpatched Shark Vacuum Flaw Could Let Attackers Control Other Vacuums Region-Wide

July 16, 2026 at 02:53PM Pull the certificate off the flash of a Shark RV2320EDUS robot vacuum, and you can run root commands on …

OpenAI’s GPT-Red Automates Prompt Injection Testing to Harden GPT-5.6 Sol

July 16, 2026 at 02:12PM OpenAI has disclosed details of GPT-Red, an internal automated red-teaming model that scales prompt inje…

Zoom Patches Critical Windows Flaw That Could Enable Account Takeover

July 16, 2026 at 12:52PM Zoom has released security updates for a critical security flaw impacting Zoom Workplace for Windows tha…

TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development

July 16, 2026 at 12:13AM Cybersecurity researchers have disclosed details of a previously unreported Internet-of-Things (IoT) bot…

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

July 15, 2026 at 11:00AM SonicWall has warned of active exploitation of two zero-day vulnerabilities impacting Secure Mobile Acce…

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

July 15, 2026 at 01:55AM Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attac…

Researchers Say Claude for Chrome Flaw Lets Rogue Extensions Trigger Gmail Reads

July 14, 2026 at 10:57PM Any other browser extension that can run a script on claude.ai can still trigger Claude for Chrome tasks…

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

July 14, 2026 at 12:38PM A campaign of 148 npm packages disguised as student web proxies turned visitors' browsers into a dis…

Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths

July 14, 2026 at 11:49AM Attackers whose methods line up with the data-extortion group ShinyHunters have spent the past year walk…