…release announcing that, on June 25, 2026, Aflac Japan discovered an unauthorized third-party had unlawfully accessed certain of Aflac Japan's systems between June 15, 2026 and June 25, 2026," the…
US charges Google security engineer with Polymarket insider trading By Sergiu Gatlan May 29, 2026 06:11 AM A Google security engineer was charged with insider trading after winning $1.2 million…
…The issue was fixed in version 3.15.4, which is the recommended upgrade target for website administrators. No active exploitation of CVE-2026-8713 has been observed yet, but this is…
Fake OpenAI repository on Hugging Face pushes infostealer malware By Bill Toulas May 9, 2026 10:26 AM A malicious Hugging Face repository that reached the platform’s trending list impersonated OpenAI…
Google loses final appeal to overturn €4.1 billion EU fine By Bill Toulas July 2, 2026 11:18 AM Court of Justice of the European Union (CJEU) has dismissed Google's…
…privileges, and affects all Gogs releases up to and including 0.14.2 and 0.15.0+dev. They can exploit this vulnerability to compromise the targeted server, read any repository (including…
New 'HTTP/2 Bomb' DoS attack crashes web servers in under a minute By Bill Toulas June 3, 2026 03:08 PM A new denial-of-service (DoS) attack dubbed HTTP/2…
…abused npm's publishing mechanism to release backdoored packages. "When the workflow runs, it installs Bun and executes _index.js , passing it a list of target packages via the OIDC_PACKAGES environment…
Windows BitLocker zero-day gives access to protected drives, PoC released By Bill Toulas May 13, 2026 12:37 PM A cybersecurity researcher has published proof-of-concept (PoC) exploits for two…
…2026-41089) during the May 2026 Patch Tuesday , describing it as a stack-based buffer overflow in Windows Netlogon that allows attackers without privileges to gain remote code execution on targeted domain…