…Requiring device manufacturers to pre-install Google Search and Chrome in order to license the Play Store. Requiring manufacturers not to sell devices running Android versions not approved by Google (anti-fragmentation…
Palo Alto GlobalProtect VPN auth bypass flaw now exploited in attacks By Lawrence Abrams May 30, 2026 02:02 PM Palo Alto Networks is warning that hackers are now exploiting a PAN…
…Starting in version 12, npm install will not run preinstall, install, or postinstall scripts from dependencies unless they have been explicitly approved. This also applies to native module builds triggered through node…
…Expel’s security researcher Marcus Hutchins explains that the attacks direct the victim to install a fake “PowerShell Cleaner” executable (.MSI) hosted in Microsoft Azure, making the download appear trustworthy. Analysis of…
…A flaw in the installer allowed a standard user to launch PowerShell from the installation interface, causing the shell to inherit the installer's privileges. BleepingComputer tested the vulnerability at the time…
…Kaspersky said the Head Mare hacktivist group has been exploiting CVE-2026-72529 and CVE-2026-72530 since at least July 2026 to replace client installers with malicious versions designed to deploy…
New Gogs zero-day flaw lets hackers get remote code execution By Sergiu Gatlan May 28, 2026 10:25 AM An unpatched zero-day vulnerability in the Gogs self-hosted Git service…
…The attackers retrieved this certificate and installed it on a self-made device, which then appeared as a legitimate part of KT’s network, capturing cellular traffic from nearby devices connecting to…
…The agency's urgent alert comes after hackers disrupted more than 30 community water systems in Minnesota in attacks that started last Sunday and continued through Monday. CISA's alert refers to…
…7-Zip fixes RCE flaw exploitable with malicious archives Critical Langflow RCE flaw exploited to hack AI app servers Critical UniFi OS bug lets hackers gain root without authentication CISA sets urgent…
