wolfSSL has released wolfSSH 1.6.0 to fix five security flaws, including a critical host key verification bypass that could let an attacker impersonate an…
Category: Cyber Security News
Gitea Patches 27 Security Flaws, Including Critical SSH Authentication Bypass and SSRF
Gitea has released security updates addressing 27 reported flaws across versions 28.0.0 and 28.1.0, including a critical SSH authentication bypass and…
Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data
A suspected lone threat actor used an AI-powered penetration-testing tool called ARTEX to breach several South Korean financial organizations and steal…
Royal Navy Service Member Charged with Spying for a Foreign Country
A serving Royal Navy member has been charged with spying for an unnamed foreign country after an investigation by Counter Terrorism Policing London. Teddy…
Top 10 Best API Security Tools in 2026 [Ranked & Scored]
Your API count is wrong every traffic-based discovery deployment proves it and business-logic abuse rides valid-looking requests straight past WAF…
Top 10 Best Software Supply Chain Security Tools in 2026 [Ranked & Scored]
The supply chain is four attack surfaces wearing one buzzword dependencies, pipelines, artifacts, and base images and no vendor covers all four. We scored…
Hackers Use GitHub-Hosted Poem to Control PoeLLM Malware Targeting AI Infrastructure
Hackers are using a poem hosted on GitHub to guide PoeLLM malware toward its command-and-control servers, turning exposed AI infrastructure into a growing…
Critical Cisco Nexus Flaws Let Unauthenticated Attackers Execute Code With Root Privileges
Cisco has released security updates for three critical vulnerabilities in Nexus 3000 and 9000 Series switches that could let remote attackers run code…
MALFEX npm Malware Hides Executables in PNG Files to Infect Windows Developers
A long-running npm malware campaign called MALFEX is targeting Windows developers with remote access tools, data stealers, and hidden downloaders. The…
Top 10 Best Secrets Detection Tools in 2026 [Ranked & Scored]
Attackers don’t crack what they can copy and leaked API keys sit in git history, Slack threads, and cloud workloads waiting. Evaluating the landscape…
Hackers Registered New Domain with Exact Microsoft Teams Interface to Steal Logins
A newly registered website is copying the Microsoft Teams login page and full user interface, raising concerns about a phishing attempt aimed at stealing…
PoC Released for Critical VMware VMXNET3 Flaw Enabling Guest-to-Host Code Execution
A public proof of concept is now available for CVE-2026-59346, a critical integer overflow flaw in VMware’s VMXNET3 virtual network adapter, released by…
Top 10 Best ASPM Platforms in 2026 [Ranked & Scored]
Application security’s real crisis isn’t missing findings it’s five scanners producing five contradictory backlogs nobody owns. Instead of treating…
Splunk Patches Critical 9.8 Flaw Allowing Unauthenticated Remote Command Execution
Splunk has released security updates to fix a critical Splunk Enterprise vulnerability that could let an attacker run operating system commands without…
Top 10 Best SCA Tools in 2026 [Ranked & Scored]
Nine-tenths of the average codebase arrived via package manager, and attackers noticed years ago. With modern breaches increasingly originating from…
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
U.S. Offers $10 Million Reward for Chinese Hacker Who Tried to Steal COVID-19 Research
The U.S. Department of State is offering up to $10 million for information on Zhang Yu, a Chinese national accused of helping hackers target American…
Elastic Fixes 14 Security Flaws Including One That Lets Attackers Intercept Other Users’ Data
Elastic published 14 security advisories covering Elasticsearch, Kibana, and Elastic Agent/Endpoint, including a high-severity Kibana flaw that lets…
Claude Haiku 5.5 – Cheapest Model with Enhanced Coding and Computer Use.
Anthropic has released Claude Haiku 5.5, its newest small AI model. The company says it is the cheapest, fastest, and most capable small model it has ever…
FBI Warns FortiBleed Attack Compromised 80,000+ Devices and Locked Out Admins
The FBI and U.S. Secret Service have issued a joint cybersecurity advisory warning that the ongoing FortiBleed campaign is targeting internet-facing…