…Also, releases hosted on WordPress.org were confirmed to be clean, suggesting that the attackers gained access to ShapedPlugin’s release infrastructure. WordPress is currently tracking the incident under CVE-2026-10735…
Drupal critical update to fix bug with high exploitation risk By Bill Toulas May 20, 2026 08:52 AM Drupal has announced a "core security release" scheduled for later today, warning that…
Cisco fixes SD-WAN vManage flaw exploited in zero-day attacks By Sergiu Gatlan June 15, 2026 01:12 PM Cisco has released security updates to address a vulnerability in the Catalyst…
Google fixes one actively exploited Android zero-day, 124 flaws By Sergiu Gatlan June 2, 2026 07:10 AM Google has released the June 2026 Android security patches to address 124 vulnerabilities…
…In each of those accounts, the threat actors leaked the source code in a repo named "Miasma-Open-Source-Release." This indicates that the threat actors deliberately released the source code, rather…
…Of the suggested dependencies that do resolve to real packages, nearly half contain known CVEs or outdated releases. Attackers routinely monitor public LLM output patterns and developer code repositories to identify these…
…Researcher h0xilo submitted the CVE-2026-3300 vulnerability through Wordfence in February, and on March 18, the Everest Forms developer released a patch that addresses the issue. According to Wordfence data, active…
…Anthropic prepares roll out of Mythos model In a blog post , Anthropic confirmed that it plans to release Mythos-class models to the public in the coming weeks, but it has not…
Ubiquiti warns of new max severity UniFi OS vulnerability By Sergiu Gatlan July 8, 2026 04:15 AM Ubiquiti has released security updates to patch seven critical vulnerabilities in UniFi OS, including…
Exploit released for new PinTheft Arch Linux root escalation flaw By Sergiu Gatlan May 20, 2026 06:52 AM A recently patched Linux privilege escalation vulnerability now has a publicly available proof…