…The new campaign was discovered by application security company Socket and extended to 37 malicious releases for 19 packages that appear to be from a single maintainer. The researchers say that the…
…questioning of a Ukrainian suspect Notifications issued to identified users of the platform The press release from the Dutch police confirms that all users of First VPN have been identified and directly…
…code via the creation of new editor profiles for unauthenticated users," CISA warned on Tuesday. The JCE security team addressed this in early June with the release of JCE Pro 2.9…
…36-year-old Michele Spagnuolo, an Italian citizen residing in Switzerland and a Google employee since 2014, appeared on Wednesday in the Southern District of New York. In parallel, the Commodity Futures…
…It affects all versions of the plugin from 2.1.4 and older and has been addressed in version 2.1.5, released on March 17. WordPress security company Defiant is warning…
…gives access to protected drives, PoC released BitLocker Bypass Microsoft Mitigation Windows Windows 11 Windows Server YellowKey Zero-Day Sergiu Gatlan Sergiu is a news reporter who has covered the latest cybersecurity…
…Popular node-ipc npm package compromised to steal credentials GlassWorm malware attacks return via 73 OpenVSX "sleeper" extensions New macOS stealer campaign uses Script Editor in ClickFix attack New Infinity Stealer malware…
…A relatively new extortion gang known as CoinbaseCartel has claimed the attack by adding Grafana to their data leak site (DLS), although no data has been leaked yet. Grafana Labs is the…
…Cisco released security updates for the CVE-2026-20230 flaw on June 3, warning that exploitation could give attackers root privileges on the device. "A vulnerability in Cisco Unified Communications Manager (Unified…
Microsoft warns of new Defender zero-days exploited in attacks By Sergiu Gatlan May 21, 2026 03:49 AM On Wednesday, Microsoft started rolling out security patches for two Defender vulnerabilities that…
