Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing

September 8, 2026 at 12:30PM Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K…

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution

September 7, 2026 at 11:42PM Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolk…

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released

September 7, 2026 at 04:50PM A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJ…

N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw

September 7, 2026 at 02:01PM Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day ea…

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

September 7, 2026 at 01:23PM Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware…

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

September 6, 2026 at 02:04PM Elastic Security Labs has documented four previously unreported programs associated with REVSTEALER,…

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

September 6, 2026 at 01:44AM Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce tha…

Critical VMware Workstation and Fusion Flaw Lets VM Admins Execute Host Code

September 5, 2026 at 09:35PM Broadcom has released security updates for two security flaws impacting VMware Workstation and Fusio…

Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was Deleted

September 5, 2026 at 07:47PM Hardware wallet manufacturer Trezor on Friday disclosed that another 67,000 customers from the U.S. …

Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Into Their Coordination Channel

September 5, 2026 at 01:25PM A group of AI safety researchers says a fleet of autonomous agents that identified themselves as Ope…

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

September 5, 2026 at 01:01PM Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in at…

GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests

September 4, 2026 at 12:17PM OpenAI on Thursday officially unveiled GPT‑6 Astra, which it described as the "world's most…