…According to supply-chain security platform SafeDep, although the trigger mechanism is different in compromised Mistral AI and TanStack packages, they drop the same credential-stealing payload. Microsoft Threat Intelligence analyzed the…
…Users of the Burst Statistics plugin are recommended to upgrade to the patched release, version 3.4.2, released on May 12, 2026, or disable the plugin on their site. WordPress.org…
…The security issue is tracked as CVE-2026-26956 and has been confirmed to impact vm2 version 3.10.4, although earlier releases may also be vulnerable. Proof-of-concept (PoC) exploit…
New GhostLock tool abuses Windows API to block file access By Lawrence Abrams May 11, 2026 06:02 PM A security researcher has released a proof-of-concept tool named GhostLock that…
…Days later, the company released multiple emergency, out-of-band updates for all affected Windows platforms to fix the Windows 365 remote desktop connection issue. The Validation Gap: Automated Pentesting Answers One…
…When the malicious npm package was released, Grafana’s CI/CD workflow consumed it, and the info-stealer module executed in its GitHub environment, exfiltrating GitHub workflow tokens to the attackers. The…
…Last year, the developer released a new version with upgraded capabilities. ACSC notes that Vidar deletes its executable after launching on the infected device and then operates from system memory, reducing forensic…
…Fortinet released security updates for two critical flaws in FortiSandbox and FortiAuthenticator . Google released Android's May security bulletin , which fixes 10 vulnerabilities. Ivanti released security updates for a high-severity Endpoint…
…NGINX is a massively used web server and reverse proxy platform, powering a third of the top ranked websites . It can efficiently balance load by distributing incoming network traffic to multiple backend…
…Apex One is Trend Micro's enterprise-grade endpoint security platform that protects corporate networks from a wide range of security threats, including malware, ransomware, fileless attacks, and web-based threats. Tracked…