A critical security flaw in React Server Components can let attackers run code remotely without logging in. React published the advisory, tracked as…
Category: Cyber Security News
SonicWall Warns of Potential In-the-Wild Exploitation of SSLVPN Flaw That Bypasses MFA
SonicWall has warned customers to patch a SonicOS SSLVPN vulnerability that could let attackers bypass SAML authentication and its multi-factor…
Claude Code’s “Yes, and Don’t Ask Again” Option Can Leak Passwords and API Keys to GitHub
Claude Code’s “Yes, and don’t ask again” option can save passwords and API keys inside project settings that later reach public GitHub repositories.…
Hackers Launch 240,000 Attempts to Exploit a WordPress Core Flaw That Allows Remote Code Execution
Hackers have launched more than 240,000 exploit attempts against a WordPress Core vulnerability that can allow attackers to run malicious code without…
ARTEX AI Agent Escapes Research Sandbox and Accesses WorkOS Customer Records
WorkOS says an ARTEX AI security agent escaped a researcher’s test environment and accessed customer information through an exposed internal tool. In its…
New Dark Project Ransomware Group Offers Hackers 80% Commission to Expand Cyberattacks
A ransomware group called Dark Project is recruiting criminal partners with an offer of 80% of proceeds from successful attacks, pairing generous…
Mirax Android RAT Hijacks Phones Through Streaming-App Ads to Steal Banking Credentials and Drain Accounts
An Android banking malware campaign is turning streaming-app advertisements into a route for stealing credentials and draining accounts. Mirax, the remote…
Microsoft Warns Fake Game Downloads Are Secretly Monetizing Windows PCs
Fake game downloads and cracked software installers are turning Windows PCs into money-making tools for campaign operators. Microsoft has warned that…
ARTEX AI Agents Steal 190,000 Gaming Credentials and Hundreds of Apple Code-Signing Certificates
Cybercriminals are now using ARTEX, an AI-powered penetration testing platform, to break into websites with almost no human input. In the cases studied,…
Anthropic’s Claude Code Reportedly Leaks User Email Addresses Through HTTP User-Agent Headers
Anthropic’s Claude Code is facing privacy concerns after a user reported that the AI coding tool sent their email address to third-party websites through…
Hackers Launch 240,000 Exploit Attempts WordPress Core Flaw Enabling Remote Code Execution
Hackers have launched more than 240,000 exploit attempts against a WordPress Core vulnerability that can allow attackers to run malicious code without…
Storm-2603 Hackers Exploit SharePoint ToolShell Flaws to Hide Fileless Backdoor and Launch Ransomware Attack
A China-linked threat group tracked as Storm-2603 has used the SharePoint ToolShell flaws to plant a backdoor that never touches the disk. The group then…
Hackers Use ARTEX AI to Find GitHub Secrets and Steal Azure Key Vault Data in Just 5 Minutes
Hackers are using the ARTEX AI framework to find exposed credentials on GitHub and turn them into access to cloud systems. In one observed case, an AI…
Claude Dispatch Flaw Lets Malicious Browser Extensions Run Code on Connected Computers
A flaw in Anthropic’s Claude Dispatch let a malicious browser extension run commands on a computer via Claude Desktop. That computer could even be a…
ARTEX AI Hacking Framework Found on 1,465 Public Servers, Some Hosting Cyberattack Tools
Security researchers have found ARTEX, an AI-powered penetration-testing framework, exposed on 1,465 internet-facing hosts. Some servers also hosted…
Hackers Could Bypass ChatGPT Lockdown Mode to Steal Conversations Without Users Knowing
A flaw in ChatGPT let attackers slip past Lockdown Mode, the safety setting meant to stop data leaks. Check Point Research found that a hidden pop-up…
Top 10 Best Deception Technology Solutions in 2026 [Ranked & Scored]
Deception inverts security’s worst ratio: instead of mining millions of events for one attacker, you plant assets only an attacker would touch and wait…
OpenAI Launches GPT-6 Cyber That Finds 81 Firefox Flaws and Develops 948 Linux Exploits
OpenAI has launched GPT-6 Cyber, a security-focused AI model that found 81 new high-severity Firefox flaws and built working exploits for 948 Linux kernel…
Shopify Mandates IP Allowlisting for Public Apps to Prevent Unauthorized Admin API Access
Shopify is making IP allowlisting mandatory for public apps that call its Admin API, adding a security check to limit the use of stolen access tokens.…
Microsoft Paint 0-Click Vulnerability Could Allow Hackers to Take Control of Windows PCs
Microsoft’s Windows Paint vulnerability, CVE-2026-83844, could allow an unauthenticated attacker to execute code over a network without user interaction.…