…200 unique victims at the time of writing. The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but they were built to answer one…
…Hackers are exploiting a critical LiteLLM pre-auth SQLi flaw Hackers bypass SonicWall VPN MFA due to incomplete patching Drupal critical update to fix bug with high exploitation risk Hackers exploit auth…
Russian hackers turn Kazuar backdoor into modular P2P botnet By Bill Toulas May 16, 2026 10:15 AM The Russian hacker group Secret Blizzard has developed its long-running Kazuar backdoor into…
Popular node-ipc npm package compromised to steal credentials By Bill Toulas May 15, 2026 01:10 PM Hackers have injected credential-stealing malware into newly published versions of node-ipc, a…
…The statement comes in response to a post last week on a hacker forum from a threat actor using the ShinyHunters nickname, claiming to have breached the GeForce NOW service and stolen…
…The compromise was claimed by the TeamPCP hacker group, which initiated a spree of supply-chain attacks that included the Shai-Hulud campaigns on npm and the Trivy vulnerability scanner breach, resulting…
New Gogs zero-day flaw lets hackers get remote code execution By Sergiu Gatlan May 28, 2026 10:25 AM An unpatched zero-day vulnerability in the Gogs self-hosted Git service…
GreyVibe hackers use ChatGPT, Gemini to power cyberattacks By Bill Toulas May 28, 2026 06:24 PM A likely Russian threat group tracked as GreyVibe has been using AI-generated lures and…
…Hackers abuse Google ads for GoDaddy ManageWP login phishing Hackers exploit critical flaw in Ninja Forms WordPress plugin Funnel Builder WordPress plugin bug exploited to steal credit cards Hackers exploit auth bypass…
…GitHub confirms breach of 3,800 repos via malicious VSCode extension 7-Eleven confirms data breach claimed by the ShinyHunters gang Grafana says stolen GitHub token let hackers steal codebase TeamPCP hackers…