CISA warns of max severity Ubiquiti flaws exploited in attacks By Bill Toulas June 24, 2026 10:35 AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning of hackers…
Grafana breach caused by missed token rotation after TanStack attack By Bill Toulas May 20, 2026 11:46 AM The Grafana data breach was caused by a single GitHub workflow token that…
…9, 2026 10:26 AM A malicious Hugging Face repository that reached the platform’s trending list impersonated OpenAI’s “Privacy Filter” project to deliver information-stealing malware to Windows users. The…
DraftKings hacker 'Snoopy' sentenced to 18 months in prison By Bill Toulas June 24, 2026 05:55 PM A 21-year-old using the alias "Snoopy" was sentenced to 18 months in…
ShapedPlugin update flow hacked to infect WordPress sites By Bill Toulas June 18, 2026 08:55 AM Multiple WordPress plugins from ShapedPlugin were compromised in a supply chain attack that distributed infected…
…With Microsoft having fixed CVE-2026-42824, there’s no user action required to mitigate this threat. Varonis underscores that familiar, easily contained bugs like SSRF and HTML injection race conditions can…
BTMOB Android malware service generates custom phishing payloads By Bill Toulas May 28, 2026 05:10 PM An Android remote access trojan named BTMOB is offered to cybercriminals with a builder interface…
SimpleHelp bug lets hackers create rogue remote support accounts By Bill Toulas June 15, 2026 04:06 PM A vulnerability in the SimpleHelp remote management software allows unauthenticated attackers to create privileged…
…2026-44748 . “This may result in acceptance of tampered identity information leading to unauthorized access to sensitive user data and potential disruption of normal system usage.” In the case of CVE-2026…
…CVE-2026-5027 is a high-severity path traversal flaw in Langflow's file upload functionality that fails to properly sanitize user-supplied filenames. "The 'POST /api/v2/files' endpoint does not…