GitHub Cuts Public Bug Bounty Payouts, Moves Top Rewards to VIP Tier

July 23, 2026 at 12:07AM Beginning July 27, 2026, GitHub will cut public bug bounty payouts by at least half at every severity le…

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

July 22, 2026 at 08:31PM Cybersecurity researchers have disclosed details of a now-patched vulnerability chain in the Adobe Acrob…

OpenAI Says Its AI Models Escaped Sandbox, Targeted Hugging Face to Cheat Benchmark

July 22, 2026 at 09:48AM OpenAI on Tuesday said a combination of its artificial intelligence (AI) models, including GPT-5.6 Sol a…

Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

July 22, 2026 at 12:16AM Apple has moved to address a security flaw in its Hide My Email service that enabled users' real ema…

Critical ServiceNow AI Platform Flaw Exploited for Unauthenticated Code Execution

July 21, 2026 at 11:59AM Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Pla…

FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware

July 20, 2026 at 11:53PM Cybersecurity researchers have discovered nearly 7,600 malicious GitHub repositories, out of which more …

Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign

July 20, 2026 at 10:59PM A malware operator left its delivery server wide open, and Rapid7 pulled down the whole toolkit: 1,048 f…

Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs

July 20, 2026 at 02:37PM A solo Russian-speaking threat actor known as "bandcampro" outsourced a chunk of their operati…

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

July 20, 2026 at 10:45AM Cybersecurity researchers have flagged a new software supply chain attack codenamed SleeperGem targeting…

Critical NGINX Vulnerability Can Crash Workers and May Allow Remote Code Execution

July 20, 2026 at 02:12AM F5 has shipped fixes for a critical nginx flaw that lets a remote, unauthenticated attacker trigger a he…

SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access

July 19, 2026 at 06:48PM A previously undocumented threat actor has been attributed to the exploitation of recently disclosed Son…

New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code

July 18, 2026 at 02:50AM An anonymous HTTP request can run code on a WordPress site. The bug is in core, so a bare install with z…