Top submissions
-
91. Two critical SQLi vulnerabilities in WordPress (wordpress.org) ▲ -
92. Jailbroken Gemini spun up new C2 server for Russian fraudster in just 6 minutes (theregister.com) ▲ -
93. Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package (theregister.com) ▲ -
94. North Korean Hackers Compromise Go and PHP Packages (opensourcemalware.com) ▲ -
95. PRC-linked spies hid inside medical and military networks for more than a year (theregister.com) ▲ -
96. Nearly Half of LG Smart TV Apps Are Laced with Proxies (spur.us) ▲ -
97. Anonymous GitHub account mass-dropping undisclosed 0-days (github.com) ▲ -
98. Cybersecurity in the post-mythos era: Keep calm and carry on! (cephalosec.com) ▲ -
99. Apple's Hide My Email could be exposing your real email address (easyoptouts.com) ▲ -
100. Feds freaked over Fable 5 after simple 'fix this code' prompt, not jailbreak, says researcher (theregister.com) ▲ -
101. Humanity Protocol hacked for $36m (x.com) ▲ -
102. OptinMonster supply chain attack hits 1.2 million sites (sansec.io) ▲ -
103. Council of Europe hacked in ShinyHunters' PeopleSoft heist (theregister.com) ▲ -
104. Typosquatting: When Your Domain Is Used Against You (truesec.com) ▲ -
105. 10 year old critical vulnerability in phpBB affecting tens of millions of users (aikido.dev) ▲ -
106. ShinyHunters is actively extorting universities after exploiting an unpatched Oracle flaw (cyberscoop.com) ▲ -
107. Malware developers added nuclear and biological weapons text to to their spyware (x.com) ▲ -
108. Who Runs the Ransomware Group 'The Gentlemen'? (krebsonsecurity.com) ▲ -
109. Infostealers Turn Millions of Devices Into Credential Theft Machines (securityweek.com) ▲ -
110. Chrome's zero-day Whac-A-Mole continues with fifth exploited bug of the year (theregister.com) ▲ -
111. A Botnet Accidentally Destroyed I2P (sambent.com) ▲ -
112. Microsoft Hacked to Deliver Malware to Claude and Gemini Users (404media.co) ▲ -
113. From cause to cash: a cross-border look at hacktivist activity (securelist.com) ▲ -
114. Ransomware crims got a month-long head start on Check Point VPN 0-day that now has a fix (theregister.com) ▲ -
115. Anthropic: Measuring LLMs’ impact on N-day exploits (red.anthropic.com) ▲ -
116. Mapping AI-enabled cyber threats: Insights from the LLM ATT&CK Navigator (red.anthropic.com) ▲ -
117. Meta accuses NSO Group of defying spyware injunction, files contempt of court complaint (cyberscoop.com) ▲ -
118. 1,000 Data Breaches Later, the Disclosure Lag is Worse Than Ever (troyhunt.com) ▲ -
119. New IronWorm malware hits 36 packages in npm supply-chain attack (bleepingcomputer.com) ▲ -
120. Anthropic: Using LLMs to secure source code (claude.com) ▲